Threat Hunting & Intel
RondoDox botnet shifts to focused exploitation across 174 flaws
RondoDox botnet shifts to focused exploitation across 174 flaws The RondoDox botnet is no longer just another noisy vulnerability spray-and-pray operation. New...
Lucas Oliveira
Research
Slopoly Shows How AI-Generated Malware Is Entering Ransomware Operations
Slopoly Shows How AI-Generated Malware Is Entering Ransomware Operations | 2026 Executive Summary IBM X-Force says a ransomware-linked intrusion involved a like...
Lucas Oliveira
Research
OpenClaw AI Agents Can Leak Data via Indirect Prompt Injection
OpenClaw AI Agents Can Leak Data via Indirect Prompt Injection | 2026 Executive Summary OpenClaw is facing renewed scrutiny after reporting from The Hacker News...
Lucas Oliveira
Research
CVE-2025-26399: SolarWinds WHD Exploitation Hits Servers
CVE-2025-26399: SolarWinds WHD Exploitation Hits Servers | 2026 Executive Summary CVE-2025-26399 in SolarWinds Web Help Desk has moved from “critical but patcha...
Lucas Oliveira
Research
TELUS Digital breach: ShinyHunters claims 1PB data theft
TELUS Digital breach: ShinyHunters claims 1PB data theft | 2026 Executive Summary TELUS Digital confirmed on March 12, 2026 that it is investigating unauthorize...
Lucas Oliveira
Research
Doppelgänger backend leak maps 100+ disinformation domains
Doppelgänger: backend artifacts map 100+ disinformation domains | 2026 Executive Summary Researchers tracking Russia-linked influence operations say backend art...
Lucas Oliveira
Research
Coruna iOS Exploit Kit Likely Traced to L3Harris Trenchant
Coruna iOS exploit kit likely traced to L3Harris Trenchant Executive Summary Google Threat Intelligence Group says the Coruna iPhone exploit framework was used...
Lucas Oliveira
Research
ZITADEL 1-Click XSS Enables Account Takeover | 2026
ZITADEL 1-Click XSS Enables Account Takeover | 2026 Executive Summary ZITADEL disclosed CVE-2026-29191 in early March 2026, warning that versions 4.0.0 through...
Lucas Oliveira
Research
APT28 BeardShell Campaign Targets Ukraine | 2026
APT28: BeardShell and Covenant Hit Ukraine | 2026 Executive Summary On March 11, 2026, ESET detailed how APT28 (aka Sednit/Fancy Bear) has reactivated a more ad...
Lucas Oliveira
Research
FakeGit: GitHub malware campaign hits 600+ repos
FakeGit: GitHub malware campaign hits 600+ repos | 2026 Executive Summary A Vietnamese-speaking threat actor has been distributing FakeGit, a GitHub-based malwa...
Lucas Oliveira
Research
CVE-2025-8088: The WinRAR Path Traversal Flaw Powering Global Cyberattacks—From Russian Spies to Ransomware Gangs
Executive Summary Since July 2025, the critical CVE-2025-8088 vulnerability in WinRAR has become a weaponized vector for initial access, exploited by state-spon...
Lucas Oliveira
Research
Iran-Linked Android Spyware Masquerading as VPN and Starlink Apps
Recent cybersecurity investigations have unveiled DCHSpy, a sophisticated Android spyware campaign tied to Iran's Ministry of Intelligence and Security (MOIS)....
Lucas Oliveira
Research