ThreatVectr

Threat Intelligence — Page 13

A corporate security operations center with red team and blue team members working together at a shared table reviewing attack simulations and defensive strateg
Threat Intelligence

How Walmart Turned Its Security Red Team and Blue Team Into Allies

Rather than letting offensive and defensive security testers work against each other in secret, Walmart's security chief put them in the same room and changed the rules of the exercise.

4 min read
A network diagram displayed on multiple monitors showing perimeter defenses blocking incoming attacks while internal network segments light up with active threa
Threat Intelligence

Attackers Slip Past the Perimeter, Then Run Free Inside: Blue Report 2026

Companies are blocking more attacks at the front door than ever. Once inside, the criminals barely need to try.

3 min read
Illustration: A hacker's workstation with multiple browser windows and database query tools open
Threat Intelligence

Hackers Used Guest Access to Quietly Steal Data From Salesforce and ServiceNow

A newly spotted campaign, tracked as 'City-Forum', used anonymous login features built into two widely used business platforms to map and copy out sensitive data, no stolen password required.

3 min read
A web browser window displaying a convincing CCleaner download page clone, with system notification alerts appearing in the background suggesting malicious acti
Threat Intelligence

Fake CCleaner site turns Chrome into a spying and password-theft tool

Criminals built a convincing copycat download page for one of the world's most-downloaded PC tools, then used it to silently hijack Google Chrome and steal passwords, bank details, and screenshots.

4 min read
A recruiter's email inbox displayed on screen with fake job offer messages crafted with professional design, alongside Windows system dialogs showing exploitati
Threat Intelligence

North Korea's Lazarus Group Used a Secret Windows Flaw to Break Into Defence Companies

Hackers posing as recruiters sent fake job offers to aerospace and aviation workers in Europe and India, then used a previously unknown Windows vulnerability to seize full control of their computers.

4 min read
A large dataset visualization showing 434,000 files being extracted from servers, PyPI package registry interface visible, stolen data flowing across network pa
Threat Intelligence

Poisoned LiteLLM Packages on PyPI May Have Leaked Secrets From 2,100 Organisations

CloudSEK says a 434,000-file dataset stolen during a 40-minute window in March traces back to two malicious releases of the popular AI gateway library.

3 min read
A mobile phone screen showing Google Chrome browser with notification popups being blocked and filtered, junk notification examples appearing and disappearing,
Threat Intelligence

Chrome Now Blocks 7 Billion Junk Notifications a Day on Android

Google's browser is quietly killing off scam pop-ups at the source, using layered checks that yank permissions from sites behaving badly.

4 min read
Close-up of a credit card being held over a glowing smartphone screen displaying a streaming service login page, with warning indicators and suspicious ad banne
Threat Intelligence

Fake 'Watch The Odyssey Free Online' Sites Are Stealing Bank Details From Film Fans

Criminals are buying ads for bogus streaming pages tied to the summer's biggest blockbuster. If you hand over your card number for the 'free trial', your money goes with it.

3 min read
Network traffic visualization showing data streams disguised as normal HTTP/2 sessions, with hidden malicious packets highlighted within legitimate-looking web
Threat Intelligence

New Kimwolf v7 Botnet Disguises DDoS Attacks as Normal Web Traffic

Palo Alto Networks says the upgraded Android and smart-device botnet hides its floods inside HTTP/2 sessions that look like ordinary browsing.

3 min read
A laptop screen showing a professional job offer email with subtle malware indicators hidden in the interface, dimly lit against a shadowy background suggesting
Threat Intelligence

Fake Job Offers From Russian Hackers Target Ukrainian IT Staff

Ukraine's cyber emergency team says a Sandworm subgroup is posing as recruiters to slip remote-control malware onto engineers' laptops.

3 min read
An airplane cabin with passenger seats visible in background, foreground showing a smartphone screen displaying two overlapping Wi-Fi networks—one legitimate, o
Threat Intelligence

Delta Investigates Rogue Wi-Fi Network on Flight Carrying DEF CON Attendees

Passengers returning from the Las Vegas hacker conference allegedly knocked others off the plane's Wi-Fi and stood up a fake 'Delta WiFi Fast' network that harvested Google logins.

4 min read
Network traffic visualization displaying massive terabit-scale DDoS attack waves, with comparative data showing 800+ attacks above 1 Tbps intensity spike across
Threat Intelligence

Cloudflare Says Terabit-Scale DDoS Attacks Jumped Fivefold This Spring

The web-infrastructure giant mitigated more than 800 network attacks above 1 Tbps in the second quarter, up from 130 the quarter before.

4 min read
A laptop keyboard being used by a hidden operator with keystroke logging indicators visible, cryptocurrency company branding in background, and North Korean con
Threat Intelligence

Researchers Set Up a Fake Crypto Company and Hired Three Suspected North Korean IT Workers

The sting recorded every keystroke on the laptops the fake employer issued, exposing the paper trail of a scheme US officials say funnels wages back to Pyongyang.

3 min read
A developer's desk with dual monitors displaying lines of code and git commit logs, a physical smoke detector mounted on the wall above in soft focus, morning l
Threat Intelligence

Your GitHub activity logs are a smoke detector you forgot to switch on

Two researchers showed at Black Hat USA 2026 that the evidence needed to catch software supply-chain attacks has been sitting inside GitHub all along. Their open-source tool turns that evidence into working alerts.

4 min read
A browser window with multiple tabs open, one tab showing a disguised affiliate link redirecting, subtle visual glitch or redirect animation captured mid-frame,
Threat Intelligence

Banned Chrome Extension Returns With Hidden Affiliate Scam, and Security Researchers Warn the Next Version Could Be Worse

A browser add-on pulled from the Chrome Web Store for stealing AI chat conversations is back, and it's now quietly opening affiliate links on users' computers every time it updates.

4 min read
© 2026 Threat Vectr