1. Executive summary A ransomware group operating under the name "lamashtu" listed Bender Tribunenbau, a German manufacturer of mobile and permanent grandstands, stages and
1. Executive summary A SANS Internet Storm Center diary describes a honeypot-logging experiment in which TTY session logs from the DShield Cowrie sensor are parsed
1. Executive summary The qilin ransomware group listed Emser, a Spanish victim, on its leak site on 2026-10-04. The listing is a claim of
1. Executive summary CVE-2026-88779 is a memory-buffer flaw in Citrix NetScaler ADC and NetScaler Gateway that the vendor and NVD describe as allowing
1. Executive summary A leak-site listing posted on 2026-10-04 attributes a victim entry to the extortion group "krybit" naming euroditel.com,
A 12 MB batch file that unpacks a genuine, signed ScreenConnect client wired to an attacker's relay, disables every user-visible indicator, survives reboot and Safe Mode — and what it looks like on a real infected host.
1. Executive summary A China-aligned espionage group tracked as TA419 has run credential phishing campaigns against AI policy experts at U.S. think tanks, universities,
1. Executive summary On 2026-10-03 the ransomware group calling itself Wallstreet listed "World Cup 2034" on its leak site, claiming it compromised
The first detonation gave us nothing. No DNS, no sockets, no drops, no persistence 8.6 MB of Go binary that ran, yawned, and went back
1. Executive summary The qilin ransomware group listed Sports Events365, a GB-registered sports events and hospitality ticketing business, on its public leak site on 2026-
1. Executive summary Apache Airflow's serialization layer reconstructs exception nodes by calling import_string() on a class name taken from a serialized blob and
1. Executive summary A ransomware group calling itself Spirals listed seven seas group, a GB-registered global maritime services supplier, on its leak site on 2026-