⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cyble's H1 2026 threat landscape analysis reveals that Advanced Persistent Threats (APTs) dominate activity, with ransomware, data breaches, and hacktivism highlighting the industrialization of cybercrime.
Operation BlueDash is a Microsoft Teams-themed phishing campaign that delivers legitimate remote monitoring and management (RMM) tools including Level RMM and ConnectWise ScreenConnect. Victims are directed through compromised web infrastructure to a fake Microsoft Store page claiming Teams needs updating, which drops an Inno Setup loader that fetches and installs the RMM tools using attacker-controlled enrollment secrets for persistent remote access.
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
China-linked cybercrime groups are using a sophisticated crypter service called Cruciferra to deliver RATs and info-stealers. Written in Mono, Cruciferra employs BYOVD-based EDR tampering, indirect system calls, API/IAT unhooking, privilege escalation, persistence mechanisms, and Process Ghosting to execute payloads while minimizing forensic artifacts.
A threat actor with ties to East Asia is targeting Middle Eastern government entities using a multi-stage attack chain deploying TELESHIM, MIXEDKEY, and BINDCLOAK malware families. Zscaler ThreatLabz detected the campaign with TELESHIM abusing the Telegram API for C2 communication to blend with legitimate traffic.
GitHub announced a new cooldown mechanism for Dependabot that waits at least three days after a package release before opening a pull request for version updates. This is designed to limit the blast radius of supply chain attacks where threat actors push poisoned versions of popular packages that get quickly pulled by downstream projects before being yanked.