← Latest

#cti

  1. Fake security tools on GitHub push backdoors and infostealers

    bleepingcomputer.com Nov 6, 2026 vulnmalwareprivacyctidlp notes

  2. The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

    elastic.co Nov 6, 2026 vulnmalwareidentityprivacychrome-extensionbrowserctidlp notes

  3. M365 Token Spray and Replay Campaign Compromises Business Email Accounts↗

    huntress.com Nov 6, 2026 cloudincidentvulnidentityprivacyctidetectioncampaign-compromises notes

  4. Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure

    cloud.google.com Nov 6, 2026 appseccloudctisupply-chain notes

  5. ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

    cloud.google.com Nov 6, 2026 appsecincidentvulnaptransomwarecticve-2026-35273shinyhuntersunc6240campaign-targeting notes

  6. Investigating Ephemeral Supply Chain Tampering↗

    cloud.google.com Nov 6, 2026 incidentmalwarectisupply-chaindetection notes

  7. MadApe: The Code That Opens the Door↗

    group-ib.com Nov 6, 2026 researchcloudvulnidentityctitooling notes

  8. Managed for Malice: How Attackers Turn MDM into Remote Access

    huntress.com Nov 6, 2026 researchvulnmalwarecti notes

  9. Threat actors use agentic AI tooling to find and abuse exposed secrets↗

    microsoft.com Nov 6, 2026 appseccloudvulnidentityaiprivacyartexctitooling notes

  10. Camera Management Software Compromise Leads to Malware Deployment

    huntress.com Nov 6, 2026 researchincidentvulnmalwarectidetection notes

  11. Email threat landscape: Q3 2026 trends and insights

    microsoft.com Nov 5, 2026 cti notes

  12. APT29's Watering Holes Target Thousands of Mobile Users

    darkreading.com Nov 5, 2026 aptprivacymobilectiapt29 notes

  13. Prediction Markets Emerge as a New Vertical for Traffer Teams

    recordedfuture.com Nov 5, 2026 vulncti notes

  14. Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

    krebsonsecurity.com Nov 5, 2026 incidentmalwarectixcpe notes

  15. The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach

    securelist.com Nov 5, 2026 researchcloudincidentprivacyctidetectionstorm-2603 notes