VulnerabilitiesLearn about the Pass-ta-key attacks exposing Google Password Manager flaws, allowing malware to steal synchronized passkeys and bypass verification.
APTMidnight Blizzard's CaptiveCrunch campaign hijacks public Wi-Fi captive portals to steal Microsoft 365 credentials using device code phishing and custom malware tools.
Malware18 malicious npm packages mimic Alibaba tools to drop a cross-platform RAT. Learn how this dependency confusion attack threatens developers via OS-specific payloads.
Data BreachesLiechtenstein Beneficial Ownership Register breach leaked 31,000 sensitive records of company owners, risking reputational damage and regulatory scrutiny.
APTThe leaked DarkSword iOS exploit kit code fuels a campaign using 100+ AWS and Apple ID lure sites to deliver GHOSTBLADE malware and steal user credentials.
RansomwareRiver Bank & Trust was hit by a ransomware attack causing data exfiltration, suspected ransom payment, system shutdowns, and four ongoing lawsuits.
VulnerabilitiesAttackers exploit N-able N-central CVE-2026-18577 to bypass authentication. Discover how to patch servers and hunt for malicious CloudFlare tunnels.
RansomwareSonicWall SMA1000 zero-days give attackers full control, fueling INC ransomware attacks. Victims are targeted with fake help offers and extortion tactics.
VulnerabilitiesLearn about the N-central double authentication bypass via Cloudflare tunnels. Details on recent CVEs, active attacks, and steps for quick remediation.