SectionResearch
New techniques, papers and threat intelligence.
FortiBleed Credential Theft Operation Tied to INC and Lynx Ransomware Groups
Researchers at SOCRadar have linked the large-scale FortiBleed FortiGate credential theft campaign to operators of the INC and Lynx ransomware-as-a-service platforms, with…
Inside BEC Operations: How Attackers Orchestrate Email Fraud at Scale
Threat intelligence from criminal forums reveals that business email compromise is far more than a phishing scam, involving coordinated infrastructure, call centers,…
Amazon Fined $2.25M for Blocking Identity Theft Victims’ Transaction Records
The FTC says Amazon repeatedly denied fraud victims and law enforcement access to transaction records required by federal law, citing bogus privacy…
ARToken: Inside the EvilTokens Affiliate Panel Targeting Microsoft 365
Cisco Talos has dissected ARToken, a phishing-as-a-service panel linked to EvilTokens that abuses Microsoft OAuth device code flows to bypass MFA and…
Trojanized Pyrogram Forks on PyPI Hand Attackers Full Control of Telegram Bots
A campaign tracked as Operation Navy Ghost has distributed at least eight malicious PyPI packages since November 2025, embedding a hidden backdoor…
Microsoft Sets 2029 Deadline for Quantum-Safe Cryptography Across Critical Services
Microsoft is accelerating its post-quantum cryptography transition, citing a narrowing window before cryptographically relevant quantum computers could arrive. The company now targets…
Kali Linux 2026.2 Arrives with 9 New Tools and NetHunter Updates
The Kali Team has released Kali Linux 2026.2, adding nine new security tools, a kernel upgrade to 6.19, significant NetHunter improvements for…
Google DeepMind RCT Finds AI Tutoring Adds Up to 2.5 Years of Math Progress
A pre-registered randomized controlled trial across 12 schools in Sierra Leone found that students using Gemini's Guided Learning feature gained significantly more…
Google AMIE Medical AI Matches Physicians in Disease Management Study
Research published in Nature shows Google's AMIE system performing on par with primary care doctors in long-term condition management, outscoring them on…
Hijacked npm and Go Packages Deploy Python Infostealer via VS Code Tasks
Researchers have identified two compromised npm packages and a cluster of malicious Go packages that abuse Visual Studio Code task mechanisms to…
236,000 DCloud Uni-App Sites Fueling Crypto Scams and Phishing Campaigns
Infoblox researchers have identified over 236,000 websites built on a legitimate Chinese open-source framework that are being weaponized for investment scams, pig-butchering…
Ukraine to Convert $8.3M in Seized Crypto Into War Bonds
Ukrainian authorities have placed cryptocurrency seized from an international cybercrime group under state management, with plans to convert the funds into government…