Category: Research
DigiCert Breach Tied to CylindricalCanine, a GoldenEyeDog Subgroup
Researchers at Expel have attributed the April 2026 DigiCert security incident to CylindricalCanine, a newly identified subgroup of the Chinese cybercrime cluster…
Weekly Roundup: Iran Tracks US Troops via Ad Data, CrashStealer Hits macOS, New CVD Blueprint
This week's cybersecurity digest covers Iran-linked tracking of US military phones through ad tech and roaming data, a stealthy new macOS infostealer,…
Supply Chain Security Startup Risk Ledger Lands $32M Series B
UK-based Risk Ledger closed a £24 million Series B led by Axiom Equity to expand its supplier risk network, add AI-driven review…
Ukrainians Protest Ouster of Drone-Focused Defense Minister Fedorov
Thousands rallied across Ukraine after President Zelensky abruptly dismissed Defense Minister Mykhailo Fedorov, the former digital transformation chief credited with accelerating drone…
New ClickLock macOS Malware Locks Out Users Until They Type Their Password
Group-IB has identified a new macOS stealer called ClickLock that freezes the system and repeatedly kills processes to coerce victims into typing…
OkoBot Framework Uses 20+ Payloads to Drain Crypto Wallets and Credentials
Kaspersky researchers detail OkoBot, a modular malware framework spread via ClickFix lures and fake GitHub tools that deploys keyloggers, seed-phrase stealers, and…
Wyden Warns Canada’s Lawful Access Act Could Turn US Tech Into Spy Tools
Senator Ron Wyden is urging acting Attorney General Todd Blanche and Secretary of State Marco Rubio to push back on Canadian surveillance…
Dutch Police Dismantle €100 Million-a-Month Investment Fraud Network
A sprawling international call center operation that used fake trading dashboards to fleece tens of thousands of victims has been broken up,…
Nearly 300 Fake GitHub Repos Used to Push BoryptGrab Infostealer
A Russia-linked campaign impersonated legitimate security, crypto, and developer tools across 292 GitHub repositories to trick users into downloading a memory-resident infostealer.
Google, Microsoft Pull ModHeader Extension Over Hidden History Collector
A dormant browsing-history collector was discovered inside the official store version of ModHeader, a header-editing extension with about 1.6 million installs, prompting…
EU Weighs Bloc-Wide Social Media Age Limit of 13 for Kids
European Commission President Ursula von der Leyen is floating a harmonized EU rule barring unsupervised under-13s from social media, as member states…
CrashStealer Malware Impersonates Apple Crash Reporter to Raid macOS Keychains and Crypto Wallets
A notarized, Apple-signed installer slips past Gatekeeper to drop CrashStealer, a new macOS infostealer that fakes a password prompt to unlock the…