Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
A sophisticated phishing-as-a-service platform called Starkiller eliminates traditional detection methods by loading legitimate login pages in real time and intercepting credentials and multi-factor authentication codes through a man-in-the-middle proxy.
Microsoft's latest security update addresses over 50 vulnerabilities across its software portfolio, with six zero-day flaws already under active exploitation by threat actors.
After the Kimwolf botnet operators breached Badbox 2.0's control panel, investigators traced the infrastructure back to individuals in China with ties to multiple technology companies.
The Kimwolf IoT botnet has infected over 2 million devices and is unexpectedly prevalent within government and corporate infrastructure, exploiting residential proxy services to scan internal networks for vulnerable systems.
Research from Infoblox reveals that over 90% of parked domains now redirect visitors to malicious content, scams, and malware—a dramatic reversal from a decade ago when such threats occurred less than 5% of the time.
Mozilla is finally shutting down its Monitor Plus service powered by Onerep, more than a year after initially announcing plans to wind down the relationship with the identity protection company.
The Aisuru botnet, infamous for record-breaking DDoS attacks, has shifted tactics to rent out hundreds of thousands of compromised IoT devices as residential proxies, enabling cybercriminals and AI scrapers to mask their activities behind legitimate-looking traffic.
GitHub's secret scanning now reveals additional context about compromised secrets, including owner details, creation and expiry dates, and organizational information for supported credential types.
