1. Executive summary Malwarebytes tracking identifies PavinLoader, a multi-stage .NET loader, as a shared infrastructure component across disparate initial access vectors including ClickFix fake CAPTCHAs,
1. Executive summary In July 2026, a UK power plant was shut down for four days by a cyber attack attributed to Iran-linked hackers. The
1. Executive summary Fortra's threat intelligence unit (FIRE) has documented a phishing technique dubbed "Chameleon SEO Poisoning" that uses SEO-poisoned search
1. Executive summary AI agents can accelerate reconnaissance, vulnerability discovery, exploit-chain development, network mapping and sensitive-file identification while introducing privileged non-human identities and
1. Executive summary CVE-2026-73570 is a HIGH-severity OS command injection vulnerability (CVSS 8.9, CWE-78) in Synacor Zimbra Collaboration Suite (ZCS) versions
1. Executive summary U.S. Bancorp (7th-largest U.S. bank) stated that LockBit ransomware gang claims of data theft are attributable to a "fourth-
So I have been playing around with GLM 5.2 alot more lately for the offensive side of things. As mentioned all over this site, I
1. Executive summary A new phishing-as-a-service (PhaaS) toolkit dubbed iAuthFlow V2, first advertised on a Russian-language cybercrime forum at $10,000 for
1. Executive summary On 21 August 2026, the ransomware operator "thegentlemen" publicly claimed a compromise of dlp motive (dlp-motive.de), a German full-
1. Executive summary A critical type confusion vulnerability in the isolated-vm Node.js library (GHSA-864f-rcv7-6rh4) enables sandboxed JavaScript to escape the V8
1. Executive summary On 21 August 2026, the ransomware actor "direwolf" publicly listed Reviso Cloud Accounting Limited (DK; domain reviso.com) as a victim
1. Executive summary Microsoft has confirmed active in-the-wild exploitation of CVE-2026-69836, a CVSS 10.0 CRITICAL remote code execution vulnerability in the