SecurityNewGoogle Warns on AI Coding Tool Threats
Google Threat Intelligence Group warns AI coding tools are prime targets for supply chain attacks.
> Search
30 results for “threat actors”
SecurityNew
Cyber CrimeNode.js Abuse Signals Shift in Malware Delivery
Threat actors are hijacking the trusted Node.js runtime to deliver malware, evading detection in targeted attacks since early 2026.
SecurityZimbra attacks breach 270+ servers
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
SecuritySharePoint Flaw Exploited After PoC Release
Threat actors are exploiting a critical SharePoint authentication bypass after Rapid7 released a PoC exploit.
Cyber CrimeUNC6671 Targets SaaS via Personal Phones
Threat actors are bypassing standard enterprise security by using vishing attacks to compromise personal mobile devices.
Cyber CrimeCloud and SaaS Now Primary Attack Targets
A new report identifies a strategic shift among threat actors, moving away from simple malware toward identity and trust-based exploits.
SecurityAI Safety Bypassed via Task Splitting
Threat actors are breaking malicious projects into small, fragmented tasks to circumvent AI safety guardrails, according to research.
Cyber CrimeINC Ransomware Targets SonicWall Flaws
Threat actors are actively chaining two critical SonicWall vulnerabilities to deploy ransomware and escalate privileges to root.
SecurityCaptiveCrunch Exploits Hospitality Wi-Fi
Threat actors are hijacking hotel network gateways to push fraudulent software updates and capture user credentials via deceptive portals.
Cyber CrimeSteam Forums Hit by ClickFix Malware
Threat actors are exploiting technical support discussions on Steam to trick gamers into executing malicious PowerShell cryptominers.
Cyber CrimeBlueNoroff’s Sophisticated Phishing Kit
North Korean threat actors are leveraging AI-driven lures and Telegram account hijacks to target cryptocurrency and finance professionals.
Cyber CrimeShinyHunters Brand Used in $2K Scams
Threat actors are repurposing publicly leaked data to launch targeted sextortion campaigns demanding Bitcoin payments from breach victims.
SecurityRansomware Targets Edge Infrastructure
Threat actors are increasingly leveraging vulnerabilities in VPNs and firewalls to gain direct access to corporate networks.
Cyber CrimeInsurance Phishing Pivots to Real-Time
New research details how threat actors are ditching delayed credential harvesting for live, session-based account hijacking.
Clop Gang Targets Critical PLM Software
Threat actors are exploiting a severe vulnerability in PTC Windchill and FlexPLM to exfiltrate sensitive enterprise product data.
Cyber CrimeAI Agents Automate Post-Exploitation Task
A newly uncovered intrusion suggests threat actors are leveraging autonomous AI tools to streamline lateral movement and enumeration.
Cyber CrimeRansomware Gangs Vie for Cyber Supremacy
A rivalry between major threat actors is escalating, with data showing a surge in attacks targeting small businesses and large enterprises.
SecurityRussian Infrastructure Targeted by HelloNet
Threat actors are weaponizing legitimate security software updates to infiltrate high-value government and private sector networks.
Cyber CrimeJob Search Lures Hide Stealthy Malware
North Korean threat actors are using fake coding tests and steganography to compromise developer systems and steal sensitive data.
SecurityObfuscated Fonts Mask Global RAT Attacks
Threat actors are weaponizing fake TrueType Font files to slip low-detection malware past traditional Windows endpoint defenses.
SecurityThe Silent OAuth Exploit Bypassing Cloud Identity Defenses
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.
SecurityBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
SecurityEU and UK Escalate Defensive Stance Against Russian Cyber Networks
Joint sanctions targeting military intelligence and private threat actors aim to disrupt an expansive Russian ecosystem of digital aggression.
Cyber CrimeTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
Cyber CrimeDormant Accounts Fuel Stealthy GitHub Reconnaissance Campaigns
Threat actors are weaponizing years-old accounts to map organizational structures and probe sensitive repositories via the GitHub API.
SecurityUnpatched Surveillance Networks Face Growing Global Exploitation Risk
Thousands of Hikvision devices remain vulnerable to a critical command injection flaw, drawing attention from global threat actors.
Cyber CrimeRansomware Resurgence Signals New Era of Fragmented Threat Actors
After a brief period of decline, ransomware activity has spiked as the dissolution of the Conti group fuels a new wave of attacks.
SecurityCloud Authentication Under Siege: The Rise of OAuth ID Spoofing
A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.
Cyber CrimeA Misconfigured Server Unlocks Three-Actor Phishing Ecosystem
A single exposed directory reveals how multiple threat actors leverage AiTM tools and OAuth abuse to compromise corporate accounts.
Cyber CrimeThe Rise of Vibe-Coded Malware: AI Accelerating Intrusion Playbooks
Threat actors are leveraging AI to refine and accelerate traditional attack chains, lowering the barrier to entry for complex operations.