SectionResearch
New techniques, papers and threat intelligence.
North Korea-Linked npm Packages Impersonate Rollup Polyfills to Steal Dev Secrets
Two malicious npm packages discovered by JFrog masquerade as legitimate Rollup polyfill tooling, targeting developer environments for remote access and credential theft.
NetNut Residential Proxy Botnet Dismantled, 2 Million Devices Cut Off
A coordinated operation led by Google, the FBI, and industry partners has disrupted NetNut, one of the world's largest residential proxy botnets,…
Pegasus Spyware Hit MEP Who Was Actively Investigating Its Abuse
Citizen Lab researchers confirmed that a former European Parliament member serving on the PEGA Committee was infected with Pegasus spyware twice while…
Ousaban Banking Trojan Targets Iberian Bank Users via Fake PDF Lures
A Brazilian banking trojan is running a geo-filtered phishing campaign against Windows users in Spain and Portugal, using fake corrupted PDFs and…
ToddyCat Group Deploys Umbrij Malware to Hijack Gmail via Google API
The ToddyCat threat actor has been linked to a new malware family called Umbrij that abuses OAuth and the Google API to…
Google Loses Final EU Appeal, €4.1 Billion Android Antitrust Fine Stands
The Court of Justice of the European Union has dismissed Google's final appeal against a €4.1 billion antitrust fine, concluding an eight-year…
Supreme Court Ruling Puts EU-US Data Privacy Framework at Risk
A U.S. Supreme Court decision allowing presidents to fire FTC commissioners without cause has undermined a core pillar of the EU-US Data…
Google Loses Final EU Appeal, Owes €4.1 Billion in Android Antitrust Fine
The Court of Justice of the European Union has dismissed Google's last appeal against a €4.1 billion antitrust fine, affirming that Android…
Supreme Court Ruling Puts EU-US Data Privacy Framework at Risk
A U.S. Supreme Court decision allowing presidents to fire FTC commissioners at will has triggered legal threats against the EU-US Data Privacy…
FBI Seizes NetNut Proxy Platform and Popa Botnet Infrastructure
The FBI, working with Google, Lumen, and Shadowserver, seized hundreds of domains tied to NetNut and the Popa botnet, a network of…
UK National Cyber Action Plan Delayed by Labour Leadership Crisis
Britain's forthcoming cybersecurity strategy has been postponed again following Prime Minister Keir Starmer's resignation, raising fresh concerns about the country's commitment to…
How Unit 42 Built WebAuthn Redirection Into a Browser-Based RDP Client
Palo Alto Networks' Unit 42 engineered WebAuthn virtual channel support directly into a browser-native RDP client, a feat that required reverse-engineering undocumented…