Threat Intelligence

APT41 Deploys Undetectable Backdoor to Steal Cloud Credentials from Major Providers

China-supported APT41 targets cloud environments including AWS, Google, Azure, and Alibaba using typosquatting techniques to hide command-and-control traffic.

Thirumala Rao Padilam April 13, 2026

Threat Intelligence

New ‘Storm’ Infostealer Targets Browser Data with Server-Side Decryption to Hijack Sessions

The new 'Storm' infostealer bypasses local data decryption by sending browser information to attacker-controlled servers, enabling session hijacking...

Thirumala Rao Padilam April 13, 2026

Threat Intelligence

Anthropic Limits AI Model After Discovery of Zero-Day Exploits Across Major Systems

Anthropic restricted access to its Mythos Preview AI model following its autonomous discovery and exploitation of zero-day vulnerabilities...

Thirumala Rao Padilam April 13, 2026

Threat Intelligence

FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

The FBI and Indonesian National Police have taken down the infrastructure of the W3LL phishing operation responsible for...

Thirumala Rao Padilam April 13, 2026

Vulnerabilities

Critical PDF Zero-Day and State-Sponsored Infrastructure Attacks Surface in Latest Threat Recap

A critical zero-day vulnerability hidden in PDF files and state-sponsored attacks on infrastructure have been recently uncovered, highlighting...

Thirumala Rao Padilam April 13, 2026

Threat Intelligence

JanelaRAT Malware Continues to Target Latin American Banks with Extensive Attacks in Brazil

JanelaRAT, a modified version of BX RAT malware, has been observed targeting banks and financial institutions in Latin...

Thirumala Rao Padilam April 13, 2026

Threat Intelligence

Law Enforcement Agencies Across Multiple Countries Used Webloc for Global Device Tracking via Ad Data

A global geolocation surveillance tool named Webloc has been used by law enforcement agencies in Hungary, El Salvador,...

Thirumala Rao Padilam April 11, 2026

Threat Intelligence

APT28 Conducts Malwareless Espionage by Modifying DNS Settings on Vulnerable SOHO Routers

Russia-linked APT28 is carrying out cyber espionage by altering DNS configurations in vulnerable small office/home office routers, bypassing...

Thirumala Rao Padilam April 9, 2026

Threat Intelligence

Google Reports UNC6783 Hacker Group Stealing Corporate Zendesk Support Tickets

Google warns that the UNC6783 threat actor is compromising business process outsourcing providers to access corporate Zendesk support...

Thirumala Rao Padilam April 9, 2026

Threat Intelligence

APT28 Exploits MikroTik and TP-Link Routers in Global DNS Hijacking Campaign

Russian-linked APT28 has been identified conducting a widespread campaign to compromise MikroTik and TP-Link routers, using them as...

Thirumala Rao Padilam April 7, 2026