Mimikatz

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions

Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets

OceanLotus Shifts Focus to Domestic Espionage with SPECTRALVIPER Attacks

Iranian APT Groups Target Israeli Organizations with Modular C2 Frameworks

Operation Double Barrel: State-Sponsored Exploitation of Korean Financial Software

Attackers Exploit WDigest Vulnerability to Harvest Plaintext Credentials

Russian Drone Attack on Chernobyl's New Safe Confinement Raises Nuclear Safety Concerns

Critical Windows Print Spooler Vulnerability CVE-2021-34527 Exploited

Mustang Panda Espionage Campaigns Target India's Government and Energy Sectors

Ransomware Toolkit Exposed: TheGentlemen Affiliate's Operations Uncovered

Critical CVE-2026-62911 Exposes 22,000 Exchange Servers to Remote Code Execution

GoSerpent Backdoor Steals Sensitive Data from Southeast Asian Governments

Toy Ghouls Launch GenieLocker Ransomware Targeting Russian Manufacturing

EvilTokens Phishing Kit Exploits Microsoft 365 with AI-Driven BEC Tactics

Trigona Ransomware Group Deploys Custom Exfiltration Tool for Data Theft

Multiple Exploits Targeting Android and Web Applications

Brute Force Attack Reveals Ransomware Infrastructure Network

Ransomware Fuels Surge in Global Cyberattacks

Iran's Ravin Academy Launches Largest Cyber Training Class Amid US-Iran Tensions

Hacktivist Groups Expand Attacks Beyond Russia to Middle East and Central Asia

New Exploits Target Windows Accounts and PowerShell Scripts

Asian Cyber-Espionage Group Compromises 37 Countries' Critical Infrastructure

North Korean Lazarus Group Targets US Healthcare with Medusa Ransomware

Makop Ransomware Enhancements Target Indian Organizations

Prometei Botnet Targets Windows Servers for Remote Access and Malware Deployment

Claude Mythos Unleashes Vulnerability Discovery Bottleneck

Microsoft to Disable NTLM by Default in Future Windows Releases

Exploring Cybersecurity Certifications: OSCP and SCMLSC

Emergence of PentestingEverything and Outis Remote Management Tool

Microsoft to Retire RC4 Cipher in Active Directory by 2026

Exploitation of Kerberos Delegation Using Impacket in Active Directory

Exploiting Kerberos Delegation with Impacket

APTSimulator exploit

CVE-2026-62911 Enables Pre-Auth RCE on Exchange Server

3SBZ5Ky

Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware

North Korean Hackers Collaborate

Storm-1175 actor deploys new StormEncryptor ransomware after N

New StormEncryptor ransomware used by former Medusa affiliate

New StormEncryptor ransomware used by former Medusa affiliate

115909

State Hackers Made South Korea's Mandatory Banking Software Into Zero

Toy Ghouls’ new toy: the GenieLocker ransomware

LevelBlue found that phishing started 65% of intrusions

APT34 (OilRig): Espionage on Your Infrastructure

GoSerpent Backdoor Looted Police and Biometric Data Across Southeast Asia for Five Years

Unc2447 Sombrat And Fivehands Ransomware Sophisticated Financial Threat

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

'GodDamn' Ransomware Uses BYOVD to Smite US Companies

Attackers Downgrade WDigest Protection to Dump Plaintext Credentials With Mimikatz

Chinese APT CL-STA

Chinese

Rapid7 Analysis: CVE-2021-34527 "PrintNightmare"

114990

SOC Prime: Detect Lazarus Attacks Using Three New RATs

SHADOW-EARTH-053 Targets Exchange Servers in Asia

Trigona Ransomware

Trigona Exfiltration Custom

Trigona ransomware attackers use novel tool for data exfiltration | news

Trigona ransomware attacks use custom exfiltration tool to steal data

Exposed Ransomware Toolkit Tied to TheGentlemen Affiliate

Iran-Linked Pay2Key Ransomware Group Re

Unit 42 tracks CL-UNK-1068 intrusion cluster targeting Asian aviation, energy, government ...

Asian critical infrastructure subjected to clandestine Chinese hacking campaign

How a Brute Force Attack Unmasked a Ransomware Infrastructure Network

North Korea's Lazarus Group targets US, Middle East healthcare sectors

OSCP, SE Helldivers SC2 News & Twitter Updates

Prometei botnet exploits weak passwords on UK construction firm's server

Makop ransomware: GuLoader and privilege escalation in attacks against Indian businesses