GMO Internet Offers $1 Million Bounty After Refusing Extortion Demand
Japan's GMO Internet Group is offering up to $1 million for tips leading to the arrest of attackers who breached its Onamae.com Desktop Cloud service.
ThreatsThreat Intelligence Feed
-
-
Google Opens One-Tap Android App Install Program to Third-Party Stores
Google's Registered App Stores program lets approved third-party stores install and update Android apps with one tap, launching December 1 outside the US.
Tools -
Malicious AGENTS.md in Downloads Folder Targeted AI Coding Agents
A planted instruction file in a developer's Downloads folder attempted to make an AI coding agent install malware-linked npm packages, researchers found.
Threats -
Node2Shell PoC Achieves RCE on Official Node.js via Brotli Bug
Imperva's Node2Shell proof of concept executes attacker code on an official Node.js 24 build via a Brotli decoder flaw. Patches were released October 21.
Guides -
Microsoft October Windows Server Updates Cause Exchange OWA and Mail Issues
Microsoft confirmed October 2026 Windows Server updates are causing OWA sign-in failures and mail delivery issues on some Exchange Server systems.
VPN & Privacy -
Hackers Abuse Compromised ConnectWise Credential to Access Customer M365 Tenants
A compromised ConnectWise Cloud Backup credential has been used to gain unauthorized access to 173 partner and customer Microsoft 365 tenants.
Guides
Analysis & Guides
VPN & Privacy
Email Bombing: What It Is and How to Respond
Email bombing floods your inbox to hide fraud alerts. Here's how to spot it, respond, and protect your accounts.
Threats
PwnEscape: Critical Linux Kernel Flaw Enables VM-to-Host Memory Leak
CVE-2026-99999, dubbed PwnEscape, lets code inside a VM read host memory. Patches are available for all supported Linux stable branches.
Tools
The Blind Spots of Agentic Pentesting and How to Close Them
Agentic pentesting is the sharpest edge of offensive security today, but it leaves critical gaps. Here's where those blind spots are and how to address them.
Tools
What to Do When a Data Breach Notice Tells You Little
Breach notices are revealing less than ever. Here's how to interpret vague notifications and take meaningful action to protect yourself.
Guides
Three Teams Remotely Hack Pixel 10 at Pwn2Own Ireland 2026
Three research teams successfully exploited a fully patched Google Pixel 10 at Pwn2Own Ireland, winning a combined $562,500 in prizes.
Threats
ARTEX AI Pentesting Tool Weaponized Against South Korean Financial Firms
An unknown threat actor used the open-source AI pentesting tool ARTEX to breach South Korean banks. A separate actor, SCARLET LOOP, was found automating account
VPN & Privacy
Low-Cost Android Phones Ship with Firmware-Embedded Residential Proxy Malware
A malware campaign called 'Midnight Mimosa' embeds malicious code in low-cost Android firmware, enabling ad fraud and residential proxy abuse across 150+ countr
Tools
Wazza Phishkit Uses Multi-Stage Routing to Target Banking and Government
The Wazza phishkit targets banking, manufacturing, and government sectors across the US, Europe, and Australia using a multi-stage routing chain to evade detect
Tools
ShinyHunters Leader Detained in Jordan While Extorting Boeing Spinoff
A teenager suspected of leading ShinyHunters was detained in Jordan while extorting a former Boeing subsidiary, and is now cooperating with the FBI.