Kimsuky’s two new Linux backdoors, BirdTroy and DriveTroy, breached South Korean groupware vendors in 2025-2026, using Google ...

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors ...

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...

OpenAI rogue AI agent breach now confirmed at a second company: Modal Labs CTO Akshat Bubna disclosed that the same agent ...

South Korea diplomatic academy hack: Ministry of Foreign Affairs revealed the KNDA e-learning platform was compromised for ...

Microsoft Patch Tuesday July 2026 delivers 622 CVEs, the largest release in company history, with two exploited zero-days in SharePoint Server and AD FS now on CISA's Known Exploited Vulnerabilities ...

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. Between late ...

The false choice Somewhere between the vendor pitch and the budget meeting, public sector security teams are being handed a choice. Keep doing everything by hand, and accept that you will always be ...

A modular suite of lightweight, production-ready Python utilities designed for automated host-level security auditing, infrastructure resource monitoring, and network verification. This repository ...

Spread the loveWhen you’re working remotely, or even just need to access your home PC from a café, a Remote Desktop VPN is ...

I am reading through the blog about ACR Stealer. It feels like a 'full course' meal, so by the time I finish reading, I feel a bit stuffed... Microsoft observed ACR Stealer campaigns between late ...

A curated list of public and research-accessible datasets for time-series anomaly detection, event detection, fault detection, and closely related benchmarking tasks. The focus is on datasets with ...