★ Latest · Threat Intelligence
Self-Propagating Malware Turns npm Package Republishing Into Its Own Attack Vector as ChainDrop Infects Over 400 Packages
2026
Threat Intelligence
An Incomplete Patch Let Attackers Walk Back Into N-able N-central Within Days of the First Fix
Threat Intelligence
Credential Rotation No Longer Evicts Attackers as Void Blizzard’s OWAReaper Persists Inside Exchange Mailboxes
Threat Intelligence
The Management Plane Becomes the Blind Spot as a 20-Year-Old IPMI Flaw Leaks Password Hashes From Thousands of Servers
Threat Intelligence
GitHub and PyPI Make Delay the Default as Package Ecosystems Move to Blunt Supply-Chain Poisoning
Threat Intelligence
The Browser Becomes the Payload Factory as SourTrade Assembles Malware From Memory, Not Disk
Threat Intelligence
The HTML Sanitizer Becomes the Weak Link as Russian State Hackers Exploit a Zimbra Bypass for Five Months
Threat Intelligence
AI Orchestration Tools Become the Preferred Beachhead as Langflow Lands on CISA’s Watch List for the Fourth Time This Year
Threat Intelligence
Microsoft 365 Calendars Become State-Linked Malware’s Newest Command-and-Control Hideout
Threat Intelligence
A Year After Cl0p’s Oracle EBS Campaign, Breach Notices Are Still Landing, and Estee Lauder Is the Latest
