Analysis Report on Recent Phishing Attacks by the APT-C-48 (CNC) Group

Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat

Cisco Security Advisory: Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing Artificial Intelligence, Cyber, Medical, and National Defense Research | Google Cloud Blog

Threat Intelligence Report: Russia, Router, DNS, and Messaging-Layer Collection Operations

Operation Poisson – Analyzing a Cybercriminal’s Entire Operation

Hunting Honey Pots as Red Teamers

VSMEx: A Collection Tool and a Dataset of Malicious VS Code Extensions: Data/Toolset Paper

GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions

FishMonger’s arsenal upgraded: SprySOCKS for Windows

ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Agentic Malware Analysis: From Task Automation to Deep Analysis

SSH honeypot for 54daya saw 28 human operators

toastfix-demo: Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with ClickFix-style lure

smokedmeat: A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

MAD Bugs: Feeding Claude Phrack Articles for Fun and Profit

jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies

Predator Spyware Bypasses iOS Recording Indicators

Paper page - A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers