SectionResearch
New techniques, papers and threat intelligence.
CISA and Australia Urge Critical Infrastructure to Pre-Plan OT Isolation
New joint guidance from CISA, the ACSC, the FBI and international partners lays out how operators of water, energy, transportation and telecom…
Google Overhauls Threat Actor Naming With New Cryptonym System
Google Threat Intelligence Group is retiring its old sequential APT numbering in favor of two-word cryptonyms that pair a memorable identifier with…
SourTrade Malvertising Campaign Assembles Malware Inside the Browser
A malvertising operation dubbed SourTrade delivers malicious payloads in fragments and uses a legitimate Bun runtime to assemble the final Windows executable…
Steam Forum Scammers Trick Gamers Into Installing XMRig Cryptominers
Threat actors are posing as helpful forum members on Steam, tricking users into running PowerShell commands disguised as PC optimization fixes that…
Fake ShinyHunters Sextortion Emails Exploit Old Breach Data for $2,000 Bitcoin Demands
Scammers are recycling email addresses from ShinyHunters' published data leaks to send fraudulent sextortion emails, falsely claiming device compromise to pressure victims…
Malvertising Campaign Builds Malware Inside the Browser, Never Touches the Network
A crypto and trading themed malvertising operation dubbed SourTrade uses service workers and shared workers to assemble malicious executables locally in browser…
HelloNet Campaign Hijacks ViPNet Updates to Hit Russian Government Networks
A threat actor tracked as HelloNet has been sideloading malicious code into Russia's widely certified ViPNet networking suite since May, deploying a…
Carders Move Beyond Residential Proxies as ‘Clean’ IPs Become Scarce
Analysis of nearly 2,900 underground forum posts shows carding actors treating residential proxies as one fragile layer in a broader identity-simulation stack,…
DigiCert Breach Tied to CylindricalCanine, a GoldenEyeDog Subgroup
Researchers at Expel have attributed the April 2026 DigiCert security incident to CylindricalCanine, a newly identified subgroup of the Chinese cybercrime cluster…
Weekly Roundup: Iran Tracks US Troops via Ad Data, CrashStealer Hits macOS, New CVD Blueprint
This week's cybersecurity digest covers Iran-linked tracking of US military phones through ad tech and roaming data, a stealthy new macOS infostealer,…
Supply Chain Security Startup Risk Ledger Lands $32M Series B
UK-based Risk Ledger closed a £24 million Series B led by Axiom Equity to expand its supplier risk network, add AI-driven review…
Ukrainians Protest Ouster of Drone-Focused Defense Minister Fedorov
Thousands rallied across Ukraine after President Zelensky abruptly dismissed Defense Minister Mykhailo Fedorov, the former digital transformation chief credited with accelerating drone…