Injective Labs npm Package Hijacked to Steal Crypto Wallet Keys
Attackers compromised the Injective Labs GitHub repository to publish a malicious npm package that exfiltrates private keys and mnemonic phrases.
GuidesThreat Intelligence Feed
-
-
North Korean PolinRider Campaign Publishes 108 Malicious Packages Across Registries
North Korea's Contagious Interview campaign has published 108 malicious packages across npm, Packagist, Go, and Chrome in an active supply chain operation calle
Threats -
Seven Unpatched Flaws Disclosed in Embedded FAT Filesystem Library FatFs
Security firm runZero disclosed seven vulnerabilities in FatFs, a filesystem library embedded in cameras, drones, and industrial controllers. No upstream fix ex
Guides -
CISA Warns CVE-2026-45659 Microsoft SharePoint RCE Flaw Actively Exploited
CISA has added a high-severity Microsoft SharePoint RCE flaw to its KEV catalog. Federal agencies must patch by Saturday under BOD 26-04.
Tools -
How AI Is Transforming the Capabilities of Video Surveillance
AI enables natural language queries on video footage, allowing intelligence officers to search for behaviors rather than objects—creating vast new surveillance
VPN & Privacy -
Ukraine and FBI Uncover Russian Intelligence Messaging Account Hack Campaign
Russia targeted Signal and WhatsApp accounts of officials and activists across Ukraine, Europe, and the U.S. via SMS phishing posing as platform support bots.
Guides
Analysis & Guides
Threats
AI Liability: Why Companies Must Own Their Agents' Actions
A German court ruled Google liable for AI search summaries, reigniting the carrier-vs-publisher debate and raising urgent questions about corporate accountabili
Guides
Webinar: Stopping Account Takeovers With Behavioral AI
BleepingComputer hosts a July 8, 2026 webinar on account takeover threats and how behavioral AI can automate detection and response.
Threats
Tata Electronics Confirms Cyberattack as World Leaks Group Publishes Data
Tata Electronics confirmed a cyberattack on parts of its IT infrastructure. The World Leaks group leaked alleged Apple manufacturing data stolen in the incident
Tools
AryStinger Botnet Infects 4,000+ D-Link Routers Worldwide
The AryStinger botnet has compromised over 4,000 outdated routers, converting them into proxies for scanning, tunneling, and malicious traffic operations.
VPN & Privacy
AutoJack: How One Web Page Can Trigger RCE via AI Agent
Microsoft's AutoJack exploit chain turns an AI browsing agent into an RCE vector via an unauthenticated local WebSocket in AutoGen Studio.
Guides
Gentlemen Ransomware Deploys Multiple EDR Killers to Disable Defenses
The Gentlemen RaaS group maintains a suite of EDR-killing tools, led by GentleKiller, targeting over 400 processes across 48 security vendors.
Guides
Inside Gentlemen's EDR Killer Framework: A Technical Analysis
ESET researchers detail the EDR-killing toolset of ransomware gang Gentlemen, including their in-house GentleKiller framework and integrated third-party tools.
VPN & Privacy
Protecting Legacy OT Systems Against Modern Cyberthreats
Legacy OT systems in manufacturing face growing cyber risks as IT/OT convergence expands attack surfaces. Visibility, architecture, and long-term support are ke
Guides
EvilTokens Phishing Kit Hijacks Microsoft 365 Without Stealing Passwords
EvilTokens abuses Microsoft's OAuth device code flow to compromise accounts without fake login pages or stolen passwords, bypassing 2FA entirely.