Browsing: Threat Campaign

Essential Insights Attackers are systematically enumerating GitHub organizations and repos using automated tools and dormant…

Summary Points Phishing emails impersonate company employees to deliver malicious XLS files exploiting CVE-2017-0199, leading…

Quick Takeaways A China-aligned group, UNK_MassTraction, is exploiting vulnerabilities in Roundcube mailservers at US and…

Essential Insights The NewsJunkie operation generated nearly two billion invalid CTV bid requests daily by…

Fast Facts AI-driven ransomware can autonomously exploit unpatched vulnerabilities, conduct lateral movement, and encrypt data…

Summary Points Critical vulnerabilities in Adobe ColdFusion and Campaign Classic allow malicious actors to execute…

Quick Takeaways Hackers are exploiting Metamask’s password recovery process by phishing for users’ secret security…

Summary Points Threat actors exploited CVE-2026-33017 in Langflow to execute remote code, deliver a Monero…

Essential Insights Russian threat actors now target Signal accounts by social engineering, convincing users to…

Fast Facts The campaign leverages publicly available exploits and custom dropper executables masquerading as legitimate…