Browsing: Threat Campaign

Fast Facts Malicious npm packages like "imgdecode" and related tools exploit Node.js environments to deploy…

Quick Takeaways The campaign employs AI-assisted, bespoke spear-phishing emails using legitimate event themes and impersonations…

Quick Takeaways The GhostAction campaign has compromised over 1,900 GitHub accounts to inject malicious workflows,…

Top Highlights The breach was facilitated by basic security gaps like weak authentication on third-party…

Quick Takeaways Several major breaches exposed personal and sensitive data involving millions, including Denmark’s registry,…

Essential Insights Cookies used by Google Analytics can track user behavior and identify individual users,…

Essential Insights Attackers exploited high-profile GitHub maintainer accounts to inject malicious workflows that exfiltrate sensitive…

Fast Facts A Russia-linked group, UAC-0099, uses the sophisticated MatchBoil malware downloader to target Ukrainian…

Top Highlights A cyber campaign claims to have leaked a sensitive Saudi GIP database, potentially…

Top Highlights Malicious Firefox extensions are stealing cryptocurrency recovery phrases and private keys by intercepting…