Threat Intelligence
Threat Actors Target Sshole Vulnerability in Widespread Scanning Campaign
Telemetry from SSH honeypots reveals a spike in scanning activity targeting the sshole vulnerability, CVE-2026-123158, utilizing long-strin…
Section
Threat Intelligence
Latest Threat Intelligence news and analysis.
Cloud Security
Google Warns LLMjacking Attacks Trigger Up to $1 Million in Cloud AI Bills
Financially motivated threat actors are stealing API keys and exploiting cloud infrastructure to resell LLM access, racking up massive ente…
Threat Intelligence
APT29 Targets iOS and Android Devices With Zero-Click N-Day Exploits
Russian state-sponsored group APT29 used watering hole sites and a compromised analytics tool to launch zero-click mobile exploit chains ag…
Threat Intelligence
China-Nexus Hackers Exploit VMware Zero-Day and Firewall Vulnerability Chains
State-aligned Chinese threat actors weaponized a VMware ESX logging zero-day and combined PHP2Shell bugs with the Linux Fragnesia flaw to c…
Threat Intelligence
Phishing Attack Leverages 27 Malicious npm Packages to Snare Credentials
A sophisticated spear-phishing campaign has infiltrated the npm registry, using over two dozen malicious packages as infrastructure to stea…
Threat Intelligence
ViciousTrap Turns Thousands of Cisco Devices into Global Honeypot
A threat actor dubbed ViciousTrap has built a massive, globally distributed honeypot by exploiting a vulnerability in Cisco network devices…
Threat Intelligence
Qilin Ransomware Dominates April Data Leak Landscape
The Qilin ransomware group surged to the top spot in April, responsible for a staggering 45 publicly disclosed data leaks. Security researc…
Threat Intelligence
SentinelOne Says Chinese Hackers Targeted Its Systems and Clients
A China-linked hacking group known as PurpleHaze attempted to infiltrate SentinelOne's infrastructure and the networks of some of its most…
Threat Intelligence
Coquettte Malware Campaign Unmasked by OPSEC Blunder on Bulletproof Hosts
A rookie cybercriminal has inadvertently revealed details of the Coquettte malware campaigns by relying on the Russian bulletproof hosting…