LATEST THREAT INTELLIGENCE

Next-Gen Cyber Security
Insights & Intelligence

Deep-dive analysis, hands-on tutorials, and cutting-edge threat intelligence from industry practitioners.

Featured Article

🔥 Breaking

Nikkei suffers third breach in a month, 1.8M records exposed

Hackers used stolen credentials to breach Nikkei's cloud, leaking 1.83 million records, 150 k with personal details, but no misuse detected yet.

⏱️ 2 min read📅 10/20/2026

Latest Articles

Supply Chain

Malicious npm ‘indexed‑btree’ hides payload, exfiltrates via Slack

The npm package ‘indexed‑btree’, masquerading as ‘sorted‑btree’, runs a hidden BTree.set() routine that gathers system info and sends it to Slack, Telegram and an Ethereum contract.

⏱️ 7 min read📅 9/21/2026
Vulnerability

AI‑Assisted Exploit Chains libheif RCE with OpenAI SSO

Hacktron leveraged Claude Opus 5 to combine a libheif RCE bug in Discourse with an OpenAI SSO flaw, briefly hijacking staff ChatGPT and Codex accounts and accessing an internal repo.

⏱️ 4 min read📅 9/20/2026
Advisory

Vectra AI rolls out Ascent partner program to tackle AI‑driven threats

Vectra AI unveiled Ascent, a partner program aimed at expanding AI‑focused security services.

⏱️ 2 min read📅 9/19/2026
Threat Intelligence

NightEagle targets Russian firms, drops GhostContainer on Exchange

China‑origin APT‑Q‑95 has begun compromising Russian companies, using stolen VPN credentials to infiltrate Microsoft Exchange servers and install the GhostContainer backdoor.

⏱️ 3 min read📅 9/18/2026
Malware

13 Malicious npm Packages Deliver WeaselBiscuit Stealer

Researchers uncovered 13 npm modules that pull the WeaselBiscuit JavaScript stealer, exfiltrating Chrome extension data on Windows, macOS and Linux.

⏱️ 3 min read📅 9/18/2026
Vulnerability

AI‑crafted libheif exploit lets Hacktron hijack OpenAI employee accounts

Hacktron used Claude to auto‑write a remote‑code‑execution exploit for Discourse, then leveraged over‑permissive OpenAI sign‑in tokens to take over an employee’s ChatGPT account and push code to an internal repo.

⏱️ 4 min read📅 9/18/2026