Category: Research
AmnesiaStealer Malware Hijacks macOS Browser Sessions in Real Time
A new macOS infostealer spread via ClickFix lures clones victims' Chromium browser profiles and lets attackers remotely drive authenticated sessions through a…
Ukraine Takes Down 94 Fraudulent Call Centers in Nationwide Sweep
A joint operation by Ukrainian police, security services, and German law enforcement dismantled dozens of scam call centers running fake investment platforms…
‘Jewelbug’ Hackers-for-Hire Mix State Espionage With Crypto Theft
Researchers say a threat group tracked as Jewelbug ran both nation-state espionage operations and financially motivated cryptocurrency heists through the same web-based…
City-Forum Campaign Targets Salesforce, ServiceNow in Long-Running Data Theft Operation
A data theft campaign dubbed City-Forum has been quietly targeting Salesforce and ServiceNow environments across multiple industries since at least March 2025,…
New Mexico Judge Orders Meta to Pay $567 Million Over Youth Safety Failures
A Santa Fe judge ruled Meta must fund harm-mitigation efforts and overhaul how minors use Facebook and Instagram, calling the platforms a…
NRWA Teams With DEF CON Franklin to Shield Small Water Utilities
The National Rural Water Association has launched the Water Watch Center with DEF CON Franklin and five managed security providers to bring…
NatJack Attack Class Hijacks TCP Sessions by Abusing NAT Tables
Researcher Malcolm Stagg unveiled NatJack at Black Hat USA 2026, a technique that manipulates NAT connection state to hijack TCP sessions, spoof…
Ransom Cartel Ransomware Creator Sentenced to 16 Years in US Prison
Maksim Silnikau, the Belarusian who built and administered the Ransom Cartel ransomware-as-a-service operation, was sentenced in Virginia after pleading guilty to wire…
DOUBLECUP LaaS Hides Malware in Cached PNGs via ClickFix Prompts
A new Russian loader-as-a-service called DOUBLECUP uses fake CAPTCHA lures to stash steganographic payloads in browser cache, delivering an updated CountLoader and…
Liechtenstein Breach Exposes 31,000 Beneficial Ownership Records
Attackers accessed Liechtenstein's Register of Beneficial Owners for two days in late July, exfiltrating data tied to companies, foundations, and trusts before…
New York Puts $9 Million Toward Securing 153 Water and Wastewater Systems
Governor Kathy Hochul announced the SECURE grant funding days after a coordinated attack campaign hit operational technology at water utilities across at…
Microsoft Ties Midnight Blizzard to Captive Portal Wi-Fi Credential Theft Campaign
Microsoft attributes the CaptiveCrunch campaign, which hijacked hotel and conference Wi-Fi captive portals to steal Microsoft 365 credentials, to Storm-2945, a subgroup…