T1098 - Account Manipulation

Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation

Threat Actors Exploit AWS Cognito Refresh Tokens for Persistent Access

Sleeper Packages in Supply Chain Attack Target GitHub Actions and Credential Theft

Unauthorized Account Removals from AWS Organizations Exploited by Threat Actors

GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension

Aur0ra Ransomware Group Uses SpaceX's Cursor AI in Cyber Attacks on Seven Firms

EasyDNS Suffers Social Engineering Attack, Briefly Hijacking eth.limo Domain

Iran's Cyber Response to U.S. Military Strikes Expected Amid Rising Tensions

METR API Key Theft Results in $600,000 Credit Loss

Crazy Ransomware Gang Exploits Employee Monitoring Tools for Attacks

Miasma Worm Supply Chain Attack: 73 Microsoft GitHub Repositories Compromised via AI ...

Ongoing exploitation of Cisco Catalyst SD

New software supply chain attack uses sleeper packages for credential theft and CI tampering

What the March 2026 Threat Technique Catalog update means for your AWS environment

Friday's eth.limo Hijack Caused by Social Engineering on EasyDNS

Europol Dismantles Tycoon 2FA: Inside the Takedown of a 64,000-Attack Phishing-as

Cyber Advisory: Increased Cyber Risk Amid U.S.–Israel–Iran Escalation

Who's the bossware? Ransomware slingers like employee monitoring tools, too