Related Threat Clusters
-
APT41 Exploits Cloud Services with New Zero-Detection ELF Backdoor
APT41, a China-backed threat group, has been identified using a new zero-detection ELF backdoor targeting Linux cloud workloads across major platforms including AWS, Google Cloud Platform, Microsoft Azure, and Alibaba…
6 articles · Updated April 13, 2026 -
Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices
On July 3, 2026, Google, in coordination with the FBI and other partners, disrupted the NetNut residential proxy network, also known as the Popa botnet. This operation targeted over 2 million compromised consumer…
54 articles · Updated July 2, 2026 -
Global Takedown of Kratos Phishing-as-a-Service Infrastructure
On July 20, 2026, German and U.S. authorities dismantled the Kratos phishing-as-a-service (PhaaS) platform, arresting its developer in Indonesia. The operation neutralized over 200 servers and disrupted approximately…
17 articles · Updated July 21, 2026 -
Russian Cyber Espionage Clusters Exploit OAuth and Phishing Techniques
Google's Threat Intelligence Group (GTIG) is tracking three Russian cyber espionage clusters—UNC6293, UNC7005, and UNC5976—targeting individuals in academia, defense, and government across Europe and the U.S. These…
15 articles · Updated August 21, 2026 -
China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware
A China-linked cyber espionage operation has compromised a Vietnamese public hospital's imaging systems, infiltrated Malaysia's Ministry of Foreign Affairs, and targeted Honduras's National Congress using a new malware…
2 articles · Updated July 23, 2026 -
Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks
A critical vulnerability in Linux KVM, named Januscape (CVE-2026-53359), has been discovered after lying dormant for 16 years. This flaw allows attackers with root access in a guest virtual machine to escape to the host…
31 articles · Updated July 7, 2026 -
Supply Chain Attack Targets Checkmarx KICS Tool via Docker and VSCode Extensions
Hackers have compromised Docker images and VSCode extensions for the Checkmarx KICS analysis tool, which is used to identify security vulnerabilities in source code. The attack involved a trojanized KICS Docker image…
2 articles · Updated April 23, 2026 -
Bitwarden CLI Compromised in Supply Chain Attack via npm
A malicious version of the Bitwarden CLI password manager was distributed via npm, affecting version 2026.4.0 for a brief window on April 22, 2026. The attack exploited a compromised GitHub Action in Bitwarden's CI/CD…
18 articles · Updated April 24, 2026 -
JetBrains Cadence Breach: Exploitation of Unpatched TeamCity CVE-2026-63077
Between August 8 and August 24, 2026, attackers exploited CVE-2026-63077, a critical vulnerability in JetBrains TeamCity, to breach the JetBrains Cadence cloud compute service. The attackers accessed sensitive data,…
4 articles · Updated September 6, 2026 -
Cordyceps Vulnerability Exposes Thousands of Code Repositories to Attacks
A newly identified supply chain vulnerability named 'Cordyceps' affects CI/CD workflows across major platforms, allowing unauthenticated attackers to exploit Git-based repositories. Novee's research flagged 654…
13 articles · Updated June 23, 2026
Recent Intelligence Reports
- 2026 Cloud Security Index — www.intruder.io · September 7, 2026
- Your Cloud Security Checklist Doesn't Work the Way You Think It Does — Thehackernews · September 7, 2026
- Jetbrains Told Everyone To Patch It Didnt Patch Itself — thenewstack.io · September 6, 2026
- Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials — Thehackernews · September 5, 2026
- CrowdStrike Unveils SafeMind AI Cybersecurity System — Thelec · September 3, 2026
- Google launches Fairwind with Gemini 3.8 Flash Cyber and CodeMender for Cyber defense — Firstpost · September 2, 2026
- ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help — Cyberscoop · August 31, 2026
- Govt asks Google to take down Firebase pages impersonating banks: Report — Ibtimes.Co.In · August 22, 2026