Trending Topics
APT28 (Fancy Bear) revives espionage with Covenant/BeardShell malware. A0Backdoor spreads via Teams impersonation. Camaro Dragon targets Qatar. GhostLoader poses as OpenClaw npm package.
Trending Topics
TRENDING TOPICS
MAR 09, 2026
Update: Hackerbot-Claw-Led Campaign Targets Major
Monthly Wrap
MONTHLY WRAP
MONTHLY WRAP
Overview
February reinforced a consistent operational reality, which
Trending Topics
CVE-2026-21385
High Severity
Vulnerability Description
A memory corruption flaw in
Trending Topics
TRENDING TOPICS
MAR 05, 2026
High-Severity MongoDB Compression Bug Enables Fast
Surge In Cyber Threats - Middle East Activities
Iran's IRGC- and MOIS-aligned APTs, including APT34 (OilRig) and MuddyWater, run synchronized espionage, DDoS, and ICS/OT intrusions alongside hacktivist proxies during the Israel-Iran conflict, with confirmed access claims against Gulf energy and water utilities.
Trending Topics
Iranian APT escalation (MuddyWater, OilRig, APT33) targets critical infrastructure post-Operation Lion's Roar. Qilin and INC Ransom target law and accounting firms. Fake Zoom/Google Meet pages deploy Teramind monitoring software.
Hackerbot-Claw GitHub Actions Exploitation Campaign
An autonomous AI agent called hackerbot-claw is exploiting misconfigured GitHub Actions workflows to steal tokens and hijack repositories, fully compromising Aqua Security's Trivy project and publishing a malicious VS Code extension in its place.
Trending Topics
Scattered LAPSUS$ Hunters recruits women for social-engineering help-desk calls, offering $500-$1,000 per successful attempt. AWS confirms drone strikes damaged Middle East datacenters in UAE and Bahrain. CyberStrikeAI links to mass FortiGate exploitation.
Trending Topics
Mass scanning campaign targets 430,000+ exposed SonicWall firewalls. APT37 (ScarCruft, Group123) launches Ruby Jumper against air-gapped networks via Zoho WorkDrive C2. Hackers jailbreak Claude Code to steal 150GB from Mexican government agencies.
Trending Topics
Dohdoor backdoor campaign hits U.S. schools and healthcare with possible Lazarus ties. APT37 uses USB couriers to bridge air-gapped networks in the Ruby Jumper campaign. Infostealer-sourced credentials fuel brute-force attacks on F5 BIG-IP logins.
Trending Topics
TRENDING TOPICS
FEB 26, 2026
GRIDTIDE Disruption: PRC-Linked UNC2814 Abused Google