T1082 - System Information Discovery

OceanLotus Shifts Focus to Domestic Espionage with SPECTRALVIPER Attacks

FrostyNeighbor Cyberespionage Campaign Targets Ukrainian and Polish Governments

QuickFox VPN Supply Chain Attack Delivers FDMTP Backdoor to Windows Users

FishMonger Expands SprySOCKS Malware to Windows with Kernel-Level Stealth

Showboat Malware Targets Telecoms in China-Aligned Cyber Espionage Campaign

Chinese APT Campaign Targets Asia-Pacific with FDMTP Backdoor

Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor

New ScreenConnect Flaw Enables Malware Spread via Rogue Clients

Active Exploitation of Weaver E-cology RCE Vulnerability CVE-2026-22679

PaperCut NG/MF Vulnerability Under Active Exploitation

Critical SimpleHelp Vulnerability Exploited for Malware Delivery

GREYVIBE: AI-Driven Cyberattacks Targeting Ukraine by Russian Hackers

Exploitation of PaperCut Vulnerabilities Threatens Educational Institutions

Chinese State Hackers Target South American Telcos with Advanced Malware

Chronus Group Breach Exposes 36 Million Mexican Citizens' Data

AI Accelerates Vulnerability Exploitation: A New Era in Cybersecurity

CrystalX RAT: New Malware Combines Data Theft and Prankware Features

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

Microsoft Teams Vishing Campaign Deploys GoGRPC Backdoor

Malicious Windsurf IDE Extension Uses Solana Blockchain to Steal Developer Credentials

InstallFix Campaign Exploits AI Trust to Deliver Malware via Fake Install Pages

New Mistic Backdoor Linked to Ransomware Access Broker Activity

LeakNet Ransomware Expands Tactics with ClickFix and Deno Loader

77 Counterfeit Open VSX Extensions Harvest Developer Data

New macOS Malware Campaign Targets Users via Fake Updates and Script Editor

PamStealer: New macOS Infostealer Targets Users via Fake Maccy Manager

Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

Millenium RAT 4.*: Evolving Threat with Global Impact

Toy Ghouls Use HiveMQ and Element for New Windows Backdoors

LockBit Ransomware Targets ICBC Financial Services and U.S. Bank

LabubaRAT: New Rust-based RAT Masquerades as NVIDIA Software to Target Windows Systems

Deno-Based RAT Leveraging Teams Impersonation Targets Employees

Emerging Threat: REVSTEALER Infostealer Targets Credentials and Gaming Accounts

Gh0st RAT and CloverPlus Adware Distributed in New Malware Campaign

State-Sponsored Hackers Compromise Notepad++ Update Mechanism

Fake Crypto Conference Lures Security Researchers into Malware Trap

Asian Cyber-Espionage Group Compromises 37 Countries' Critical Infrastructure

APT24 Uses BadAudio Malware in Ongoing Espionage Campaign

Prometei Botnet Targets Windows Servers for Remote Access and Malware Deployment

WhatsApp Malware Campaign Targets Brazilian Crypto Users

WhatsApp Security Flaw Exposes 3.5 Billion Phone Numbers

MuddyWater APT Uses Rust-Based Implants in Middle East Espionage Campaign

APT24 Cyberespionage Campaign Utilizes BadAudio Malware Over Three Years

UAT-8099 Campaign Targets IIS Servers in Asia with Advanced Techniques

Iranian Hackers Pose as Recruiters to Deliver Cross

Suspected China-linked espionage campaign targets India's finance ecosystem: Seqrite

PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE

ICBC Financial Services

Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware

New research

QuickFox VPN targeted in long

Helpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC Backdoor - Zscaler, Inc.

New Rust

New Mac infostealer confirms stolen passwords before stealing data

Critical flaw in SimpleHelp exploited in attacks targeting sensitive credentials

Unveiling A New Threat The Millenium Rat

Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker

The Exploit Doesn't Exist. You Can Still Prove It Works Against You

The Exploit Doesn't Exist. You Can Still Prove It Works Against You

Deno-Based RAT Uses Teams Impersonation for Access

Advanced Kernel

SprySOCKS backdoor expands to Windows with new variants

ESET Research: China-aligned FishMonger updates its arsenal, targets governments in ...

OceanLotus (APT32) Supply Chain Attack: SPECTRALVIPER Backdoor Targets FireAnt ...

Russian hackers exploit WinRAR vulnerability for data theft | brief

GreyVibe hackers use ChatGPT, Gemini to power cyberattacks

2026 Mexican Government Data Breach Analysis: Chronus Group Attack Exposes 36 ...

Belarus

Introducing Showboat: A new malware family taunts defenses and targets international telecom firms

'FrostyNeighbor' APT Carefully Targets Govt Orgs in Poland, Ukraine

Chinese APT Campaign Targets Entities with Updated FDMTP Backdoor

Belarus-aligned FrostyNeighbor attacks Ukrainian government, again

Hackers abuse Google ads, Claude.ai chats to push Mac malware

Redline Stealer Variants Demonstrate A Low Barrier To Entry Threat

Supply chain attack via DAEMON Tools

DAEMON Tools software infected – supply chain attack ongoing since April 8, 2026

Weaver E

Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets

Mach

Novel malware campaign bundles Gh0st RAT, CloverPlus adware | brief

Newly discovered CrystalX RAT malware 'pranks' its victims

A laughing RAT: CrystalX combines spyware, stealer, and prankware features

Fake Windsurf extension uses Solana to steal dev data

Ransomware crims abused Cisco 0-day weeks before disclosure

LeakNet Ransomware Exploits ClickFix via Compromised Websites to Attack Windows ...

Unit 42 tracks CL-UNK-1068 intrusion cluster targeting Asian aviation, energy, government ...