Threat Landscape

Discussion List

• ShinyHunters Exploit Salesforce Guest Access Misconfigurations

  51 views 1 comment 0 points Most recent by Du'aine Davis June 23Daily Threat Briefing
• Axios npm Supply Chain Compromise Delivers Cross-Platform RAT

  25 views 1 comment 1 point Most recent by Du'aine Davis June 23Daily Threat Briefing
• SearchLeak Chains Legacy Web Bugs into One-Click Copilot Data Exfiltration

  31 views 1 comment 0 points Most recent by Du'aine Davis June 23Daily Threat Briefing
• Mass FortiGate Credential Leak Enables Widespread Remote Network Access

  19 views 0 comments 0 points Started by Du'aine Davis June 18 Daily Threat Briefing
• DragonForce Abuse Microsoft Teams Infrastructure for Covert C2

  9 views 0 comments 0 points Started by Du'aine Davis June 18 Daily Threat Briefing
• UnDefend Proof-of-Concept Targets Windows Defender Update Availability

  77 views 3 comments 0 points Most recent by Du'aine Davis June 17Daily Threat Briefing
• Shai-Hulud 3.0: New Malware Signals Evolving Supply Chain Threats

  143 views 7 comments 0 points Most recent by Du'aine Davis June 17Daily Threat Briefing
• Codex Discovers High-Amplification HTTP/2 Denial-of-Service Technique

  3 views 0 comments 0 points Started by Du'aine Davis June 5 Daily Threat Briefing
• FIFA World Cup 2026 Lures Drive Phishing, Malware and Credential Theft Campaigns

  7 views 0 comments 0 points Started by Du'aine Davis June 5 Daily Threat Briefing
• One‑Click Attack Chain Targets GitHub Tokens Through VSCode in Browser

  11 views 0 comments 0 points Started by Du'aine Davis June 3 Daily Threat Briefing
• AI-Supported Tooling Enables Iterative EDR Bypass Development

  2 views 0 comments 0 points Started by Du'aine Davis June 3 Daily Threat Briefing
• DriveSurge Threat Actor Compromises Thousands of Sites for ClickFix and Fake Update Malware Delivery

  4 views 0 comments 0 points Started by Du'aine Davis June 2 Daily Threat Briefing
• Coordinated operation dismantles multi‑channel Glassworm C2 infrastructure

  5 views 0 comments 0 points Started by Du'aine Davis May 28 Daily Threat Briefing
• “Vaultjacking” shows risk of synced passkeys and passwords in Google accounts

  17 views 0 comments 0 points Started by Du'aine Davis May 28 Daily Threat Briefing
• Ghost CMS CVE-2026-26980 exploited to hijack 700+ sites in ClickFix campaign

  4 views 0 comments 0 points Started by Du'aine Davis May 22 Daily Threat Briefing
• WantToCry uses exposed SMB services for file exfiltration and remote encryption

  5 views 0 comments 0 points Started by Du'aine Davis May 21 Daily Threat Briefing
• Compromised VS Code extension leads to exposure of ~3,800 GitHub repos

  12 views 0 comments 0 points Started by Du'aine Davis May 20 Daily Threat Briefing
• Malicious Tag Rewrites in GitHub Actions Enable Secret Harvesting

  13 views 0 comments 0 points Started by Du'aine Davis May 19 Daily Threat Briefing
• Phishers Weaponise “Safe Links” Using Multi‑Layered URL Rewriting

  3 views 1 comment 0 points Most recent by Du'aine Davis May 18Daily Threat Briefing
• BreachForums and TeamPCP Promote “Shai Hulud” Supply Chain Attack Competition

  5 views 0 comments 0 points Started by Du'aine Davis May 15 Daily Threat Briefing
• Threat Actors Adopt NATS Messaging Infrastructure for Covert C2

  4 views 0 comments 0 points Started by Du'aine Davis May 15 Daily Threat Briefing
• The Gentlemen RaaS Leak Highlights Infostealer‑Driven Ransomware Operations

  2 views 0 comments 0 points Started by Du'aine Davis May 14 Daily Threat Briefing
• CrashFix: The Next Evolution of ClickFix Browser Extension Tradecraft

  7 views 1 comment 0 points Most recent by Du'aine Davis May 13Daily Threat Briefing
• GhostLock Enables Ransomware-Style File Lockout Without Encryption

  4 views 0 comments 0 points Started by Du'aine Davis May 12 Daily Threat Briefing
• PCPJack Cloud Worm Steals Credentials and Removes TeamPCP Artefact

  10 views 0 comments 0 points Started by Du'aine Davis May 8 Daily Threat Briefing
• CloudZ RAT Targets OTPs via Windows Phone Link Integration

  3 views 0 comments 0 points Started by Du'aine Davis May 7 Daily Threat Briefing
• DigiCert Code Signing Misissuance Leads to Defender False Positives on Root Certificates

  3 views 0 comments 0 points Started by Du'aine Davis May 6 Daily Threat Briefing
• Multi stage Compliance themed Phishing Enables Account Compromise

  13 views 0 comments 0 points Started by Du'aine Davis May 5 Daily Threat Briefing
• Microsoft Teams Abuse Enables Delivery of Custom UNC6692 Malware

  12 views 0 comments 0 points Started by Du'aine Davis April 24 Daily Threat Briefing
• Threat Actors Use Hidden VMs to Evade Defences and Deliver Ransomware

  4 views 0 comments 0 points Started by Du'aine Davis April 20 Daily Threat Briefing