Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Microsoft Google Huntress Apple Inc. GitHub Amazon Web Services Amazon Meta

• Password Manager Infrastructure in the Wild: Surveying Prevalence, Internet Footprint, and Exposure

  Censys

  T1555.005 63% T1190 41%
  13 hours ago
• [Webinar Transcription] DarkOwl and Carahsoft – Darknet Investigations for Government

  DarkOwl

  T1588.002 87% T1593.001 55% T1195 41%
  1 day ago
• Sophisticated Quasar Linux RAT Targets Software Developers

  SecurityWeek

  T1195.001 97% T1195.002 71% T1587 33%
  1 day ago
• QLNX Targets Developers in Supply Chain Credential Theft Campaign

  GBHackers

  T1195.001 97% T1587 70% T1014 67%
  1 day ago
• Malicious PyTorch Lightning update hits AI supply chain security

  Security Affairs

  T1195.001 99% T1195.002 64% T1204.002 49%
  1 day ago
• Cloud and data sovereignty caught in a paradox

  Computer Weekly

  T1665 51%
  1 day ago
• Is cloud data sovereignty all just a case of ‘Trust me, bro’?

  Computer Weekly

  T1525 63% T1078.004 53% T1665 51%
  1 day ago
• New stealthy Quasar Linux malware targets software developers

  Bleeping Computer

  T1555 46% T1014 42%
  1 day ago
• The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed

  The Hacker News

  T1525 84% T1528 59%
  1 day ago
• Attackers Exploit Amazon SES to Send Authenticated Phishing Emails

  GBHackers

  T1566.002 97% T1586.002 76% T1566 55%
  2 days ago
• Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

  The Hacker News

  T1566.002 99% T1566.001 83% T1598 50%
  2 days ago
• One in four MCP servers opens AI agent security to code execution risk

  Help Net Security

  T1195.001 48%
  2 days ago
• Amazon SES increasingly abused in phishing to evade detection

  Bleeping Computer

  T1566.002 96% T1566 45%
  2 days ago
• Researchers report Amazon SES abused in phishing to evade detection

  Bleeping Computer

  T1566.002 94% T1566.001 50% T1598.002 40%
  2 days ago
• Backdoored PyTorch Lightning package drops credential stealer

  Bleeping Computer

  T1195.001 94% T1195.002 79% T1204.002 58%
  2 days ago
• TeamPCP Weekly Analysis: 2026-W18 (2026-04-27 through 2026-05-03), (Mon, May 4th)

  SANS ISC Diaries

  T1195.001 99% T1486 95% T1485 93%
  2 days ago
• Azure Hacking: New Cloudfoxable Challenges

  Bishop Fox

  T1525 88% T1526 48%
  2 days ago
• Malicious TanStack Package Abuses Postinstall Script to Steal Developer Secrets

  GBHackers

  T1195.001 100% T1587 82% T1195.002 66%
  2 days ago
• “Legitimate” phishing: how attackers weaponize Amazon SES to bypass email security

  Kaspersky Securelist

  T1566.002 99% T1566 43% T1525 40%
  3 days ago
• Attackers Hijack SAP npm Packages to Steal Dev Secrets

  GBHackers

  T1195.001 100% T1195.002 73% T1587 64%
  3 days ago
• ‘The inbox is no longer the only frontline’: Phishing attacks are evolving as cyber criminals ramp up ‘multi-channel’ campaigns over email and Microsoft Teams

  IT Pro

  T1684.001 92% T1566.002 77% T1586.002 55%
  3 days ago
• Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

  Trend Micro Research

  T1195.001 98% T1574.006 98% T1014 96%
  3 days ago
• Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha

  Bleeping Computer

  T1588.003 98% T1588.004 64% T1587.004 50%
  3 days ago
• CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

  Microsoft Security Blog

  T1068 99% T1611 92% T1190 53%
  5 days ago
• The npm Threat Landscape: Attack Surface and Mitigations (Updated May 1)

  Palo Alto Unit 42

  T1195.001 99% T1027 98% T1587 95%
  5 days ago
• AI Power Plays, Security Breaches, and Industry Shifts Define the Week in Tech

  TechRepublic

  T1566.002 67%
  5 days ago
• Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

  The Hacker News

  T1195.001 98% T1677 32%
  6 days ago
• 3 ways custom scan checks turn practitioner knowledge into scalable automation

  PortSwigger Blog

  T1588.006 46%
  6 days ago
• The never-ending supply chain attacks worm into SAP npm packages, other dev tools

  The Register

  T1195.001 99% T1195 94% T1587 71%
  6 days ago
• The never-ending supply chain attacks worm into SAP npm packages, other dev tools

  The Register Security

  T1195.001 48%
  6 days ago
• French prosecutors link 15-year-old to mega-breach at state’s secure document agency

  The Register Security

  T1195 36%
  6 days ago
• New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

  The Hacker News

  T1056.001 78% T1059.006 74% T1053.005 58%
  6 days ago
• What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

  The Register Security

  T1071.001 46%
  6 days ago
• SAP npm package attack highlights risks in developer tools and CI/CD pipelines

  CSO Online

  T1195.001 99% T1587 53%
  2026-04-30
• Identity Access Management Strategy for Non-Human Identities

  GitGuardian

  T1525 75%
  2026-04-30
• Linux cryptographic code flaw offers fast route to root

  The Register Security

  T1068 89%
  2026-04-30
• lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

  Snyk Blog

  T1195.001 98% T1587 47% T1567.001 43%
  2026-04-30
• Anthropic's Mythos forces a rethink of vulnerability management

  InformationWeek

  T1588.006 83%
  2026-04-29
• Weekly Threat Bulletin – April 29th, 2026

  F5 Labs

  T1195.001 99% T1190 98% T1003.001 93%
  2026-04-29
• New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

  The Hacker News

  T1195.001 99% T1587 89% T1204.005 87%
  2026-04-29
• LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

  The Hacker News

  T1190 97%
  2026-04-29
• "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

  Snyk Blog

  T1195.001 99% T1587 76% T1204.002 33%
  2026-04-29
• CyberheistNews Vol 16 #17 [Heads Up] This Sophisticated Scam Should Be a Warning to All Companies

  KnowBe4 Blog

  T1566.002 98% T1195.001 97% T1657 93%
  2026-04-28
• Simplifying AWS defense with Microsoft Sentinel UEBA

  Microsoft Security Blog

  T1525 75%
  2026-04-28
• Compromised open source package pushed malicious Elementary CLI release to developers

  IT Pro

  T1195.002 94% T1195.001 87%
  2026-04-28
• Ongoing supply-chain attack 'explicitly targeting' security, dev tools

  The Register Security

  T1195 55%
  2026-04-27
• Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

  Snyk Blog

  T1195.001 93% T1041 83% T1195.002 40%
  2026-04-27
• Email is crazy

  Lobsters — security tag

  T1071.003 69%
  2026-04-27
• Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side

  The Hacker News

  T1588.006 36%
  2026-04-27
• LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure

  The Hacker News

  T1190 97%
  2026-04-24