SectionResearch
New techniques, papers and threat intelligence.
UAT-7810 Deploys LONGLEASH Malware to Expand China-Linked ORB Network
Cisco Talos has uncovered a new malware family called LONGLEASH, along with three supporting tools, being used by the Chinese threat group…
Microsoft to Enable Windows Settings Backup by Default in Windows 11 26H2
Microsoft is shifting its enterprise Windows settings backup tool from opt-in to enabled by default for Entra-joined devices starting with Windows 11…
North Korean PolinRider Campaign Poisons Open Source Packages Across Ecosystems
A North Korean supply chain operation active since December 2025 has compromised over 100 open source packages across NPM, Packagist, Go modules,…
Russian Hackers Make Ukrainian Media Outlets a Priority Target
Ukraine's SBU warns that Russian cyber operations against broadcasters are intensifying, combining phishing, DDoS, and propaganda injection attempts alongside physical missile strikes…
Armored Likho APT Hits Government and Power Sectors with Modular Malware
Kaspersky has detailed a newly identified APT group targeting government and electric power organizations in Russia, Brazil, and Kazakhstan using spear-phishing campaigns…
Vietnam Arrests Seven Suspects Behind HiAnime Anime Piracy Network
Vietnamese authorities have charged seven individuals believed to operate HiAnime, once the world's largest anime piracy platform, with copyright infringement and money…
QuimaRAT: Java-Based MaaS RAT Targets Windows, Linux, and macOS
A newly identified remote access trojan called QuimaRAT is being sold as a subscription service, offering cross-platform intrusion capabilities across all three…
Google Launches OSS Rebuild to Verify Open Source Package Integrity
Google's Open Source Security Team has released OSS Rebuild, a platform that reproduces builds for PyPI, npm, and Crates.io packages and publishes…
Android pKVM Becomes First Consumer Software to Earn SESIP Level 5
Google's protected KVM hypervisor has received SESIP Level 5 certification, the highest assurance level under the Common Criteria-aligned IoT security standard, marking…
Google Backs DDR5 Rowhammer Research, Uncovers New Attack Patterns
Google has partnered with Antmicro and ETH Zurich researchers to build open-source FPGA test platforms for DDR5 memory, leading to the discovery…
Chrome 154 Will Enable HTTPS-Only Mode by Default for All Users
Google plans to activate 'Always Use Secure Connections' for all Chrome users in October 2026, requiring permission before loading any public site…
Flipper Zero Firmware Shifts to Community-Driven Model After Full-Time Dev Ends
Flipper Devices confirms that active feature development on Flipper Zero firmware has concluded, with future progress depending on structured community contributions managed…