Cyber Attacks
Barracuda data shows CAPTCHA abuse now central to malware and phishing campaigns
Attackers use fake verification steps to trick users into running commands, bypassing scanners and stealing credentials in widespread campaigns.
NetSec Tribune Adversary Desk
The NetSec Tribune Adversary Desk is the part of the NetSec Tribune newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware, Threat Intelligence. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 14 articles so far. See the editorial policy or report an error.
Cyber Attacks
INTERPOL Leads 17 Nations in Takedown of CSAM Messaging Networks
Law enforcement arrested 95 suspects across Latin America and Europe for distributing child sexual abuse material via online groups.
Cyber Attacks
Espionage actors deploy WinRAR exploit to target CIS energy and water sectors in evolving campaign
Espionage actors targeting CIS governments and energy sectors used a new WinRAR exploit to deploy reverse shells, marking a shift in their delivery methods.
Threat Intelligence
Recorded Future Links TAG-193 to Central Asian Espionage Campaigns
Researchers document state-linked intrusions targeting diplomatic and resource sectors across CIS nations through phishing and code hosting.
Cyber Attacks
Threat Actors Pose as Web3 Accelerator to Distribute Malicious npm Packages
Attackers used fake AI credits and audits to trick crypto founders into installing malware that steals data and monitors AI tool usage.
Malware & Ransomware
Kimsuky Operation GitPower Targets Ukrainian Officials via GitHub and Codeberg
North Korea-linked Kimsuky uses trusted code hosting sites to deliver malware and steal data from Ukrainian policy experts through multi-stage email campaigns.
Cyber Attacks
Cisco Talos Identifies WebSocket Phishing Kit Bypassing MFA for Taiwan Researchers
An operator-driven phishing kit uses live WebSocket connections to relay Google sign-in steps in real time, stealing authenticated sessions from academic targets.
Cyber Attacks
Legal Analysis Argues AI Firms Intended Hacking Acts, Rejecting Emergent Behavior Defense
A technical examination suggests major AI developers possessed criminal intent for recent unauthorized system accesses, challenging claims that autonomous model behavior absolves them of liability.
Cyber Attacks
Bitdefender Uncovers Midnight Mimosa Rootkit Silently Installing Apps on MediaTek Phones Before Power-On
Researchers found a hidden system component on low-cost phones that installs apps and generates fake ad revenue before users power on the device.
Cyber Attacks
Flax Typhoon Phishing Infrastructure Disrupted as DOJ Seizes Domains Tied to Chinese Contractor
Federal agents seized domains and disrupted scanning and spear-phishing infrastructure used by the China-linked threat group Flax Typhoon in a recent enforcement action.
Cyber Attacks
Nvidia Patches DCGM Exporter Flaw Threatening AI Training Stability
Researchers found thousands of exposed GPU monitors vulnerable to resource exhaustion attacks that could disrupt AI training workloads on the same host systems.
Threat Intelligence
GBHackers: 40 Billion DNS Records Emerge From Single Domain Amidst Conflict Expansion
A single domain triggered 40 billion passive DNS records in days, expanding across over 100 domains during military operations, according to GBHackers.
Malware & Ransomware
Shai-Hulud worm targets AI via Tensorlake npm; creds stolen in minutes, scope unclear
Credential-stealing malware was detected within minutes of the compromised npm release, though the full scope of the infection remains unknown.
Cyber Attacks
Asos confirms customer data breach after hackers send rogue app notification
The fashion retailer acknowledged a security incident following a push notification from attackers claiming full compromise of cloud storage.