News
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
CISA's “A Tale of Two SOCs” red team assessment reveals how two critical infrastructure organizations faced similar attacks but achieved
R
Author & Editor
Rahul Yadav
Co-founder at Hacklido. Covers breaches, malware and threat intelligence.
130 articles published
News
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies is a $320/month phishing-as-a-service toolkit targeting Microsoft 365 users with adversary-in-the-middle attacks
News
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
News
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
News
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
TikTok will pay $400 million to settle a U.S. lawsuit over alleged violations of children’s privacy laws, including COPPA violations and improper
News
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Kaspersky discovers new malware targeting Android car head units through compromised firmware update mechanisms, linking the campaign to the
News
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
14 trojanized npm packages are delivering RedC2 4.0's RedShell Linux backdoor through malicious module loading, combining software supply-chain attacks with an
News
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research reveals BTR Reforged, a technique abusing Microsoft Defender's signed BTR.sys driver for kernel-level file and registry
News
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
News
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Three suspected Russian cyber espionage clusters, UNC6293, UNC7005, and UNC5976, are targeting academics, defense organizations,
News
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
Malicious Rust crates targeted the software supply chain through a compromised maintainer account and a typosquatted dependency.
News
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
A China-nexus cyber espionage campaign dubbed SilkParasite is targeting Central Asian governments with seven RAT families, including five newly documented