GoldenEyeDog Subgroup CylindricalCanine Linked to April 2026 DigiCert Breach
Expel attributes the April 2026 DigiCert certificate theft to CylindricalCanine, a subgroup of Chinese cybercrime group GoldenEyeDog using Golden Gh0st RAT.
VPN & PrivacyThreat Intelligence Feed
-
-
OpenAI Temporarily Relaxes GPT-5.6 Sol Usage Limits
OpenAI is temporarily lifting GPT-5.6 Sol's five-hour usage cap for Plus, Pro, and Business plans and issuing a one-time usage reset.
Guides -
Injective Labs npm Package Hijacked to Steal Crypto Wallet Keys
Attackers compromised the Injective Labs GitHub repository to publish a malicious npm package that exfiltrates private keys and mnemonic phrases.
Guides -
Cybersecurity and the Gap Between Skill and Ability
AI is rapidly widening the gap between skill and ability in cyberattacks. The same tools that strengthen defense also enable harm.
Guides -
North Korean PolinRider Campaign Publishes 108 Malicious Packages Across Registries
North Korea's Contagious Interview campaign has published 108 malicious packages across npm, Packagist, Go, and Chrome in an active supply chain operation calle
Threats -
Seven Unpatched Flaws Disclosed in Embedded FAT Filesystem Library FatFs
Security firm runZero disclosed seven vulnerabilities in FatFs, a filesystem library embedded in cameras, drones, and industrial controllers. No upstream fix ex
Guides
Analysis & Guides
Tools
CISA Warns CVE-2026-45659 Microsoft SharePoint RCE Flaw Actively Exploited
CISA has added a high-severity Microsoft SharePoint RCE flaw to its KEV catalog. Federal agencies must patch by Saturday under BOD 26-04.
VPN & Privacy
How AI Is Transforming the Capabilities of Video Surveillance
AI enables natural language queries on video footage, allowing intelligence officers to search for behaviors rather than objects—creating vast new surveillance
Guides
Ukraine and FBI Uncover Russian Intelligence Messaging Account Hack Campaign
Russia targeted Signal and WhatsApp accounts of officials and activists across Ukraine, Europe, and the U.S. via SMS phishing posing as platform support bots.
Threats
AI Liability: Why Companies Must Own Their Agents' Actions
A German court ruled Google liable for AI search summaries, reigniting the carrier-vs-publisher debate and raising urgent questions about corporate accountabili
Guides
Webinar: Stopping Account Takeovers With Behavioral AI
BleepingComputer hosts a July 8, 2026 webinar on account takeover threats and how behavioral AI can automate detection and response.
Threats
Tata Electronics Confirms Cyberattack as World Leaks Group Publishes Data
Tata Electronics confirmed a cyberattack on parts of its IT infrastructure. The World Leaks group leaked alleged Apple manufacturing data stolen in the incident
Tools
AryStinger Botnet Infects 4,000+ D-Link Routers Worldwide
The AryStinger botnet has compromised over 4,000 outdated routers, converting them into proxies for scanning, tunneling, and malicious traffic operations.
VPN & Privacy
AutoJack: How One Web Page Can Trigger RCE via AI Agent
Microsoft's AutoJack exploit chain turns an AI browsing agent into an RCE vector via an unauthenticated local WebSocket in AutoGen Studio.
Guides
Gentlemen Ransomware Deploys Multiple EDR Killers to Disable Defenses
The Gentlemen RaaS group maintains a suite of EDR-killing tools, led by GentleKiller, targeting over 400 processes across 48 security vendors.