Spotlight
Explore interviews and discussions that reveal how cybersecurity threats unfold, and how forward-thinking defenders are staying ahead.
Grok build uploads entire git repositories to xAI cloud storage
Grok Build CLI caught uploading entire Git repositories to xAI cloud storage exposing secrets
Popa botnet linked to NetNut residential proxy service infects millions of Android TV boxes
FBI identifies Popa Android botnet infecting millions of TV boxes through NetNut residential proxy service
Chinese espionage group exploits Roundcube flaws to target US and Canadian universities
Chinese espionage group exploits Roundcube webmail vulnerabilities to target US and Canadian universities
LegacyHive Windows zero-day lets attackers load another users registry hive
LegacyHive Windows zero-day vulnerability allows attackers to load another users registry hive
Legacy Sitecore Flaw Exploited to Deliver WeepSteel Reconnaissance Malware
Attackers are abusing a misconfiguration in outdated Sitecore deployments to gain remote code execution and establish long-term access.
AI Tool HexStrike Co-opted by Threat Actors to Accelerate Exploitation of New Vulnerabilities
Originally built for ethical hacking, HexStrike AI is now being turned into an engine for real-world cyberattacks.
TransUnion Breach Exposes Data of 4.4 Million Americans in Salesforce Attack
The stolen data includes Social Security Numbers, contact details, and support messages, marking the latest in a wave of Salesforce-targeted…
ShadowSilk APT Targets Central Asian and APAC Governments with Sophisticated Espionage Campaigns
The attackers blend Russian and Chinese-speaking operators, spear-phishing, and web exploit tactics to exfiltrate sensitive government data across Central Asia…