Malware family CrySome RAT, a .NET remote access trojan Threat actor Not named; no confirmed attribution Target / victims Windows users in freight and logistics roles (single triaged incident) Del…

At a glance Organization Hugging Face Data exposed A limited set of internal datasets and several service credentials Records affected Not disclosed; review of partner and customer data ongoing Ca…

At a Glance Actor or group Unattributed threat actor; no group name published Activity type GitHub Actions abuse, internet scanning, credential theft Targets Internet-facing cPanel and WHM servers…

South Korea’s Ministry of Foreign Affairs has disclosed a leak of personal data belonging to staff at headquarters, overseas missions, and other users of the National Diplomatic Academy&#821…

At a glance Malware family ACR Stealer (infostealer; linked to a rebrand of Amatera Stealer) Threat actor No named actor; sold via malware-as-a-service (MaaS) Target / victims Enterprise Windows e…

At a glance Malware family GoSerpent backdoor, plus McMx, Stowaway, ThumbcacheService, and TmcLoader/TmcPayload Threat actor Unconfirmed. Kaspersky notes a possible link to TetrisPhantom. Target /…

At a glance Actor or group APT42 (Iran-linked; also tracked as TA453) Activity type AI-assisted spear-phishing, credential theft, TAMECAT backdoor delivery Targets or victims Defense and governmen…

The Four-Layer Credential Containment Model, the axios supply chain attack that hit 100 million downloads in under three hours, and the…

At a glance Malware family Shai-Hulud variant (“Mini Shai-Hulud”) Threat actor Unattributed; linked to the Shai-Hulud lineage and prior TeamPCP and antv campaigns Targets npm and JavaS…

TL;DR Veeam patched four flaws in Veeam Service Provider Console. Two are critical. One is an unauthenticated credential-theft bug rated CVSS 9.5. The other is an arbitrary file write that enables…