Discover how the Havoc stager campaign exploits fake invoices. Read the LevelBlue SpiderLabs report detailing this stealthy threat.

DLL Injection — Simple Explanation With Code What I am going to explain is simple so just don’t freak out and remind yourself that it’s simple. APIs We Will Use These are the Windows APIs …

Acronis reveals Khmer Shadow, a new espionage campaign using NIGHTFORGE loader and DLL sideloading to target Cambodian government entities with Havoc Demon.

A recent ransomware investigation by Microsoft yielded an astonishing revelation. Two entirely distinct and unassociated hacking syndicates were operating concurrently within the victim organizati…

At a glance Field Detail Malware family SharkLoader (loader) delivering Cobalt Strike Beacon Threat actor StrikeShark; unattributed, suspected Chinese-speaking (low confidence) Targets Government,…

At a glance Details Malware family ValleyRAT (Remote Access Trojan) Threat actor Often linked to SilverFox; attribution disputed and unconfirmed Targets Japanese and Chinese-speaking users, includ…

At a Glance Malware type Native Messaging backdoor with a malicious Chrome extension Threat actor Unattributed Targets / victims Italian-language email recipients Delivery vector Phishing email po…

At a Glance Malware family BoryptGrab-lineage in-memory infostealer Threat actor Unattributed; financially motivated, likely Russian-speaking Targets Opportunistic Windows users across sectors Del…

At a glance Actor / group Suspected Chinese-speaking APT group (low confidence) Activity type Cyberespionage using malicious ViPNet update modules Targets / victims Large Russian government, energ…

TL;DR A security researcher has published full details and proof-of-concept code for a Foxit PDF Reader vulnerability. Tracked as CVE-2026-57239, the flaw lets a local, unprivileged user gain NT A…