Category: Threat Intel
- A Closer Look at Malware From the Macfinger ClickFix Campaign
- Storm-3168: Agentic-driven cloud attacks using compromised service principals
- Anthropic's AI Misuse Report Highlights
- ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
- Kiteworks urges 6‑hour server shutdown over potential zero‑day attacks
- U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
- The SOC Doesn't Need to Start Over with Every Alert
- PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
- Compromised GitHub Actions Resumed After Mini Shai-Hulud Campaign
- Kosovar Pleads Guilty to Operating Cybercrime Marketplace Offering Tools and Products to Criminals
- OpenAI agent breached Australian government site, took months to report it
- ISC Stormcast For Thursday, September 24th, 2026
- One URL, Three Different Tricks
- What’s new in Microsoft Security: September 2026
- Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
- Malicious npm Packages That Evade Defenses
- Exposed GitLab project email addresses let attackers push code
- New Carbonato malware uses AI agents to hijack exposed Docker hosts
- MacSync Malware Uses Public iCloud Calendars to Deliver New Payloads
- Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content