Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
TWINLOOT Malware Abuses SharePoint and Teams
Researchers uncovered TWINLOOT, a Python implant that abuses Microsoft SharePoint and Teams for C2, stealing credentials and moving laterally.
Typosquatted RubyGems Steal Credentials
Researchers found 16 typosquatted RubyGems packages that install a Windows info-stealer targeting browser credentials and crypto wallets.
Microsoft Uncovers 30+ MacSync Stealer Domains
MacSync Stealer rotates domains to evade detection, but Microsoft used behavioral pivots to uncover 30+ related domains.
Clop built custom web shell for Windchill attacks
Clop-linked custom Java web shell targets PTC Windchill, exploiting CVE-2026-12569 to steal data via built-in credential decryption and file vault enu
TwinLoot Malware Operates Entirely From Microsoft Cloud
A new Python-based malware framework, TwinLoot, uses living-off-the-land tactics to steal credentials and maintain persistence, all from Microsoft's c
New malware uses Microsoft 365, Azure for C2
Researchers discovered a Python malware framework that abuses Microsoft 365 and Azure for command-and-control, blending in with legitimate traffic.
Kaspersky: APAC blocked 250K ransomware attacks
Kaspersky reported blocking 250,000 ransomware attacks in Asia Pacific during the first half of 2026, highlighting persistent cyber threats in the reg
Pirated Odyssey Copies May Steal Funds
Bitdefender warns that pirated copies of Nolan's 'Odyssey' may contain malware that steals funds. Users downloading the film risk financial loss.
Cavern C2 Uses DNS and Google Apps Script to Blend In
Kaspersky traced the evolution of the Cavern C2 framework used by Iranian hackers, revealing new components that leverage DNS and Google Apps Script t
Unprecedented Apple Spyware Alerts Reported
An unprecedented number of Apple users received threat notifications about suspected spyware attacks, according to investigators.
Evooo1Bot Linux Botnet Expands Beyond DDoS
Evooo1Bot, a Linux botnet, now includes exploitation, credential theft, and reverse SOCKS relays, turning compromised devices into persistent attacker
Evooo1Bot Linux Botnet Turns Devices into SOCKS5 Proxies
Researchers discovered Evooo1Bot, a Mirai-based Linux botnet that exploits known flaws to turn edge devices into SOCKS5 proxies for malicious activiti