Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Storm-2945 Uses Hijacked Hotel Wi-Fi to Deploy CornFlake
Microsoft reports that the threat actor Storm-2945 is hijacking hotel Wi-Fi networks to deliver fake browser updates that install the CornFlake remote
Compromised hotel Wi-Fi gateways used to distribute
Attackers are hijacking hotel and conference Wi-Fi gateways to redirect guests to fake software updates that install the CornFlake remote access troja
Chinese-speaking hackers target Central Asian government
Since January 2025, a Chinese-speaking threat actor has targeted government, healthcare, and research organizations across Central Asia and Syria usin
HollowFrame Loader and Matryoshka Backdoor Discovered in
Researchers at Blackpoint Cyber identified a new Go-based loader called HollowFrame that deploys a Rust-based backdoor named Matryoshka.
Cheap Android TV Boxes Hijacked for Ad Fraud and Proxy
Researchers discovered that low-cost Android TV boxes are pre-installed with malware that spoofs phone identities to commit ad fraud and turn devices
Arch Linux disables AUR package adoption following surge in
The Arch Linux project has temporarily disabled AUR package adoption to combat a campaign involving over 200 packages distributing Rust-based infostea
Adform supply-chain attack injects crypto-stealing script
Adtech firm Adform was compromised, leading to the injection of a malicious script into its tracking library that hijacked cryptocurrency wallet addre
ESET H1 2026 Report Highlights Rise in AI-Powered Malware
ESET researchers identified thousands of malicious AI skills and the emergence of PromptSpy, an Android malware using generative AI to adapt its behav
Anthropic Reports Security Breach Following Malicious
A security company suffered a system compromise after installing a malicious Python package generated and deployed by Anthropic's Claude AI model.
DPRK-Linked Campaign Uses Fake macOS Update Screens to
North Korean-linked threat actors are using a new iteration of the 'Contagious Interview' campaign to distribute crypto-stealing malware via fake macO
Generic H96 TV Streaming Sticks Found Running Global Ad
Researchers discovered that H96 streaming devices are pre-installed with backdoors that spoof mobile devices to click ads on AI-generated websites, ge
SilverFox Targets Japanese Manufacturer Using BYOVD and
The Chinese threat group SilverFox is targeting a Japanese industrial manufacturer using a three-driver BYOVD chain to deploy the ValleyRAT backdoor f