Threat Intelligence

Editorial illustration of three trails converging on a customer-records file, representing Microsoft's analysis of three Salesforce attack paths.

Threat Intelligence

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Microsoft maps ShinyHunters' Salesforce activity — defender review for SaaS-heavy organizations this week.

Malware

“CrashStealer” macOS Malware Reportedly Uses a Notarized Dropper to Pass Gatekeeper

A macOS notarization-abuse malware disclosure — defender review for Mac-issuing organizations this week.

Editorial illustration of a magnifying glass over a newspaper beside a spilling records folder, marking the Accenture data breach in a weekly security recap.

Data Breaches

Accenture Confirms Data Breach After Hacker Lists Stolen Source Code and Cloud Keys for Sale

A consulting-and-IT-services sector signal: Accenture has confirmed an intrusion after a threat actor advertised stolen source code and cloud credentials for sale, calling it an isolated, remediated matter even as the scale and any client impact remain unverified.

Flat white line-art of a magnifying glass scanning a grid of organization cards — GitHub organization mapping reconnaissance campaign.

Supply Chain Attack

'Ghost Accounts' Abuse GitHub API in Mass Reconnaissance Campaign, SecurityWeek Reports

A GitHub-organization reconnaissance campaign — defender posture and account-hygiene review this week.

Flat white line-art of two pennant flags converging, with one flat red dot.

Nation-State Cyber Threats

SentinelOne Details Suspected China- and India-Aligned Espionage Against Pakistan's Balochistan Police

A dual-attribution espionage disclosure targeting one Pakistani police force — a rare cross-nation-state analytical beat.

Ransomware

Unit 42 Details “The Gentlemen” Ransomware and the Affiliate Model Driving Its Growth

Another ransomware-affiliate-model profile lands on defenders’ desks — detection-engineering work this week.

Flat white line-art of a code package box linked by a single line to a wallet outline — Injective Labs npm SDK compromise.

Supply Chain Attack

Compromised Injective Labs GitHub Repo Used to Publish Wallet-Key-Stealing npm Package

Another JavaScript-ecosystem SDK compromise with cryptocurrency-user implications — defender inventory work this week.

Flat white line-art of a shield beside a monitoring screen — Microsoft research on the GigaWiper espionage-and-destructive malware family.

Threat Intelligence

Microsoft Details "GigaWiper," a Malware Family Combining Espionage and Destructive Capabilities

A new destructive-plus-espionage malware family lands on defenders' desks — detection-engineering review this week.

Cybercrime

Interpol Reports 5,800 Arrests Across 97 Countries in Global Cybercrime Crackdown

A scale-significant multi-country cybercrime disruption — law-enforcement coverage this week.

Flat white line-art of a robot assistant handing over a labeled package card — researchers disclose the HalluSquatting AI coding-assistant technique.

Supply Chain Attack

Researchers Disclose "HalluSquatting" Technique Targeting AI Coding Assistants

An AI-hallucination supply-chain finding with organization-wide implications — defender review this week.

Flat white line-art of a webmail envelope beside a university building — suspected China-linked Roundcube espionage against universities.

Nation-State Cyber Threats

Suspected China-Linked Actors Exploit Roundcube Webmail Flaws in University Espionage Campaign

A higher-education-sector espionage disclosure — sector-advisory work for university IT teams this week.

Ransomware

Sysdig Documents "JadePuffer," Reportedly the First Fully Agentic-AI-Driven Ransomware Case

The first documented agentic-AI ransomware analysis lands — cloud-defender teams review posture and the human-in-the-loop nuance this week.

See all