en
Tata Electronics Breach: 630 GB of Apple and Tesla Trade Secrets Leaked by World Leaks
How extortion group World Leaks breached Tata Electronics and leaked 630 GB of proprietary Apple and Tesla engineering assets.
Threat Intel
en
FortiBleed: 73,932 Fortinet Firewalls Compromised — Credential Extraction Campaign Analysis
Global telemetry analysis of FortiBleed: mass unauthenticated credential extraction targeting 73,932 Fortinet appliances.
en
Mastra npm Supply Chain: easy-day-js Typosquat Delivers Cross-Platform RAT to 144 Packages
How typosquatted npm packages targeting the Mastra AI agent framework infected 144 downstream enterprise packages with a cross-platform RAT.
en
DragonForce Backdoor.Turn — Microsoft Teams TURN Relay C2: Attack Chain & Detection
How DragonForce ransomware operators abused Microsoft Teams TURN server relays to bypass firewall egress filtering for C2 traffic.
en
CVE-2026-20262: Cisco SD-WAN Manager Zero-Day — Path Traversal to Root + CISA KEV
Technical root cause and remediation for the actively exploited Cisco SD-WAN Manager path traversal flaw.
en
Security Roundup: Oracle PeopleSoft Zero-Day, June Patch Tuesday, Chrome V8 Exploit, TanStack Supply Chain — Week of June 12, 2026
Weekly briefing: Oracle PeopleSoft zero-day exploited by ShinyHunters, Chrome V8 in-browser RCE, and TanStack Mini Shai-Hulud worm.
en
TanStack npm "Mini Shai-Hulud" Supply Chain Worm — TeamPCP Attack Chain, IOCs & Full Remediation
How threat actor TeamPCP deployed the Mini Shai-Hulud worm to poison TanStack packages and compromise developer build environments.
en
CVE-2026-35273: Oracle PeopleSoft Zero-Day — ShinyHunters UNC6240 Attack Chain & Remediation
How ShinyHunters weaponized an unauthenticated Oracle PeopleSoft zero-day to exfiltrate employee records across Fortune 500 firms.
en
Security Roundup: Netlogon 0-Click RCE, Citrix NetScaler SAML Exploit, TeamPCP Supply Chain, Android Zero-Day — Week of June 4, 2026
Weekly briefing: Windows Netlogon 0-click DC takeover, Citrix NetScaler SAML memory overread, and TeamPCP supply chain backdoor.
en
TeamPCP Supply Chain Attack: Trivy, KICS, and Bitwarden CLI Backdoors — Full Analysis
Full forensic analysis of the TeamPCP campaign: tag poisoning and entrypoint backdoors injected into Trivy, KICS, and Bitwarden CLI.
en
CVE-2026-3055: Citrix NetScaler SAML IDP Memory Overread — Technical Analysis & Remediation
Technical root cause and active exploitation telemetry for the Citrix NetScaler SAML session memory overread flaw.
en
Security Roundup: Megalodon GitHub Attack, Ghost CMS Exploitation, MiniPlasma & YellowKey Windows 0-Days, DirtyDecrypt LPE — Week of May 28, 2026
Weekly briefing: Megalodon backdoors 5,500 GitHub repos, Ghost CMS SQLi hijacks 700 sites for ClickFix, and MiniPlasma Windows 0-day.