Trust as the Attack Surface: Inside the ClickFix Campaigns Powering ACR Stealer- 258
July 19, 2026
No vulnerability was patched, no exploit chain engineered, in the campaigns Microsoft disclosed distributing ACR Stealer through
The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255
July 18, 2026
In April 2026, a routine support interaction at DigiCert — a customer service chat, a screenshot-disguised ZIP
North Korea just made its malware payload host itself on the blockchain- 252
July 5, 2026
North Korean threat actors behind the long-running Contagious Interview campaign have distributed more than 100 malicious
The lawyers MSG banned with facial recognition are now the plaintiffs suing over it - 251
July 4, 2026
Madison Square Garden spent years building one of the most extensive facial recognition surveillance systems of any
Device code phishing didn't need new code — it needed a legitimate Microsoft login flow- 238
May 11, 2026
A technique security researchers first observed in isolated red-team and espionage use back in 2020 has,
Poland's Signal exodus reveals a pattern too consistent to call coincidence- 230
June 28, 2026
Poland has told its government officials to abandon Signal for a state-built alternative — not because the
Belarus's Oldest Digital Weapon Returns to Kyiv- 215
June 28, 2026
Nearly a decade into its operational life, the Belarus-aligned threat group known as Ghostwriter has not
MuddyWater's Double Game: Iran's Cyber Unit Trades Precision for Reach- 213
June 28, 2026
An intrusion that looks like a ransomware shakedown and a breach wave spanning nine countries on four
Humanitarian Cover: Operation HumanitarianBait and the Surveillance Campaign Nobody Has Attributed- 190
June 15, 2026
A humanitarian aid application form, written in Russian, realistic enough that someone waiting for assistance would read
The State Messenger: Poland Abandons Signal for Sovereign Encrypted Communications- 185
June 9, 2026
Russia's intelligence services have been systematically compromising Signal accounts belonging to European government officials, journalists,
