Blog

Iran-linked group Screening Serpens is using new MiniJunk V2 and related RATs in tailored spear-phishing against aerospace, defense and telecom targets.

Actively exploited Drupal Core SQL injection flaw CVE-2026-9082 hits PostgreSQL-backed sites; patches are out and admins are urged to update fast.

SANS' SEC670 course is teaching red teamers stack-string and obfuscation tactics for building Windows implants, raising the bar for defenders.

European investigators have seized First VPN, a criminal infrastructure service allegedly used by ransomware crews and fraudsters, exposing 5,000 users.

Lawmakers demand answers after a contractor exposed AWS GovCloud keys and other CISA secrets on a public GitHub repo, raising security culture concerns.

US and Canadian authorities arrested alleged Kimwolf DDoS botnet admin Jacob Butler, tying him to a vast Android TV botnet-for-hire operation.

SANS ISC dissects a three-module malware that steals Chromium-based browser credentials, exfiltrates sensitive files, and opens a WebSocket backdoor.

Canadian police arrested a 23-year-old alleged administrator of the Kimwolf IoT botnet, which powered record DDoS attacks, amid ongoing U.S. cross-border probe.

GitHub says a poisoned VS Code extension on an employee device led to exfiltration of about 3,800 internal repos, likely via the compromised Nx Console.

GitHub is investigating claims by supply‑chain actor TeamPCP that it breached around 4,000 internal repositories, as researchers warn of wider fallout.