★ Latest · Threat Intelligence
Credential Rotation No Longer Evicts Attackers as Void Blizzard’s OWAReaper Persists Inside Exchange Mailboxes
2026
Threat Intelligence
The Management Plane Becomes the Blind Spot as a 20-Year-Old IPMI Flaw Leaks Password Hashes From Thousands of Servers
Threat Intelligence
GitHub and PyPI Make Delay the Default as Package Ecosystems Move to Blunt Supply-Chain Poisoning
Threat Intelligence
The Browser Becomes the Payload Factory as SourTrade Assembles Malware From Memory, Not Disk
Threat Intelligence
The HTML Sanitizer Becomes the Weak Link as Russian State Hackers Exploit a Zimbra Bypass for Five Months
Threat Intelligence
AI Orchestration Tools Become the Preferred Beachhead as Langflow Lands on CISA’s Watch List for the Fourth Time This Year
Threat Intelligence
Microsoft 365 Calendars Become State-Linked Malware’s Newest Command-and-Control Hideout
Threat Intelligence
A Year After Cl0p’s Oracle EBS Campaign, Breach Notices Are Still Landing, and Estee Lauder Is the Latest
Threat Intelligence
An Autonomous AI Agent, Not a Person, Ran the Intrusion at Hugging Face
Threat Intelligence
Credential-Stealing Malware-as-a-Service Gets a Professional Upgrade as ACR Stealer’s Rebrand Adds Steganography and Blockchain Dead Drops
