Sign in Subscribe

ATT-Social manip

21
Jul
Following the Money: Inside the Takedown of a €140 Million Iberian Fraud Network- 262

Following the Money: Inside the Takedown of a €140 Million Iberian Fraud Network- 262

July 17, 2026 Spain's national police disrupted, on July 13, a criminal network whose scale illustrates a pattern
2 min read
21
Jul
Past the Perimeter: Why Identity, Not Exploits, Now Drives Ransomware- 261

Past the Perimeter: Why Identity, Not Exploits, Now Drives Ransomware- 261

July 17, 2026 For three consecutive years, unpatched vulnerabilities held the dubious distinction of being ransomware's most common
2 min read
20
Jul
Trust as the Attack Surface: Inside the ClickFix Campaigns Powering ACR Stealer- 258

Trust as the Attack Surface: Inside the ClickFix Campaigns Powering ACR Stealer- 258

July 19, 2026 No vulnerability was patched, no exploit chain engineered, in the campaigns Microsoft disclosed distributing ACR Stealer through
2 min read
20
Jul
The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255

The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255

July 18, 2026 In April 2026, a routine support interaction at DigiCert — a customer service chat, a screenshot-disguised ZIP
2 min read
19
Jul
North Korea just made its malware payload host itself on the blockchain- 252

North Korea just made its malware payload host itself on the blockchain- 252

July 5, 2026 North Korean threat actors behind the long-running Contagious Interview campaign have distributed more than 100 malicious
3 min read
19
Jul
The lawyers MSG banned with facial recognition are now the plaintiffs suing over it - 251

The lawyers MSG banned with facial recognition are now the plaintiffs suing over it - 251

July 4, 2026 Madison Square Garden spent years building one of the most extensive facial recognition surveillance systems of any
2 min read
19
Jul
Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238

Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238

May 11, 2026 A technique security researchers first observed in isolated red-team and espionage use back in 2020 has,
3 min read
19
Jul
Poland's Signal exodus reveals a pattern too consistent to call coincidence- 230

Poland's Signal exodus reveals a pattern too consistent to call coincidence- 230

June 28, 2026 Poland has told its government officials to abandon Signal for a state-built alternative — not because the
3 min read
19
Jul
Belarus's Oldest Digital Weapon Returns to Kyiv- 215

Belarus's Oldest Digital Weapon Returns to Kyiv- 215

June 28, 2026 Nearly a decade into its operational life, the Belarus-aligned threat group known as Ghostwriter has not
3 min read
19
Jul
MuddyWater's Double Game: Iran's Cyber Unit Trades Precision for Reach- 213

MuddyWater's Double Game: Iran's Cyber Unit Trades Precision for Reach- 213

June 28, 2026 An intrusion that looks like a ransomware shakedown and a breach wave spanning nine countries on four
3 min read