ThreatVectr

Threat Intelligence — Page 14

Illustration: A split-screen
Threat Intelligence

Marcus Hutchins: The Accidental Hero Who Once Wrote the Code He Later Helped Stop

The man who halted one of history's most damaging cyberattacks spent years on the wrong side of the line first. His story is worth understanding.

3 min read
A weekly security briefing visualization showing multiple simultaneous threats: Metabase interface with zero-day warning, plugin ecosystem with poison indicator
Threat Intelligence

Weekly Recap: A Metabase Zero-Day, Poisoned AI Plugins, and Routers Left Wide Open

Old bugs are back, supply chains are getting stranger, and the shortest exploit paths keep being the ones nobody guarded.

4 min read
A conference stage bathed in spotlight, where a presenter in Victorian-era deerstalker hat and coat stands before a projection screen filled with social enginee
Threat Intelligence

The World's Greatest Detective Was Also the World's Greatest Con Artist

A cybersecurity professor dressed as Sherlock Holmes walked a DEF CON audience through why the tricks criminals use to manipulate people today are identical to what a Victorian fictional detective pulled off in the 1890s.

4 min read
Illustration: An empty juvenile courtroom with the judge's bench
Threat Intelligence

UK member of 'The Com' jailed for two years after blackmailing 117 girls online

Justin Swaddle, 20, used Snapchat and Discord to coerce teenage girls into self-harm and abuse images, purely to boost his standing in a sprawling online cybercrime collective.

4 min read
A server room with rows of industrial-grade computer hardware, circuit boards glowing softly in the darkness, network cables running precisely along cable trays
Threat Intelligence

Kimsuky Goes Offline: North Korean Spies Build Their Own Private AI Toolkit

South Korean researchers say the Kimsuky group has stopped relying on public chatbots and is now running AI on its own servers to sharpen phishing and speed up malware writing.

4 min read
Illustration: A water treatment facility control room with multiple screens displaying flow rates and chemical
Threat Intelligence

Iranian Hackers Hit Water Systems in at Least 12 US States

New Jersey and Alabama are the latest to confirm attacks on water infrastructure. So far, no taps have run dry and no water has been contaminated, but the campaign is still expanding.

3 min read
A district heating plant's control room with large industrial gauges showing pressure and temperature readings, technicians monitoring SCADA screens showing the
Threat Intelligence

Russian Hackers Used an Obscure Telecom Back Door to Shut Down a Polish Heating Plant

A second cyberattack on Poland's energy sector, running alongside a previously disclosed assault, exploited a rarely scrutinised type of private mobile network to reach deep inside a plant supplying heat to 50,000 people.

4 min read
A developer's workstation showing VS Code with the Extensions marketplace open, two nearly identical 'Solidity Pro' extension tiles displayed side-by-side, one
Threat Intelligence

Fake 'Solidity Pro' VS Code Extensions Caught Emptying Crypto Wallets

Two look-alike extensions posed as tools for Ethereum developers, then quietly installed wallet and credential stealers on the machines that trusted them.

3 min read
A tech support inbox flooded with hundreds of automated emails and low-quality submissions piling up on a desktop, with a tired security researcher in the backg
Threat Intelligence

AI-Generated Junk Is Clogging Apple's Bug Bounty, Ports Got Hit, and Wall Street Had a Bad Week Online

Three quieter stories from the past week: why Apple's security researchers are drowning in AI noise, how North Carolina ports came under digital attack, and a phishing email that opened a door into Wall Street.

4 min read
A business email thread on a computer screen with invoice attachments and cryptocurrency wallet addresses being subtly edited by unseen hands overlaid with malw
Threat Intelligence

Fake invoices and swapped wallet addresses: inside two 2026 attack chains

Gen's latest threat report tracks criminals who hijacked real business email threads to spread banking malware, and a separate crew quietly rewriting crypto wallet addresses as victims copied them.

4 min read
Multiple computer server racks photographed from an angle, with subtle indicators of unauthorized access points and backdoors visible in the infrastructure, rep
Threat Intelligence

The hacking crew behind a big supply-chain attack has been busy since 2020

New research links TeamPCP, the group behind a recent software supply-chain campaign, to years of quiet break-ins on exposed servers.

3 min read
A telephone headset positioned next to a computer screen displaying cloud account access logs, representing the vishing attacks that preceded data theft from ma
Threat Intelligence

Hedge Fund Vishing Attacks Traced to UNC6671, the Group Behind the BlackFile Brand

Google's threat researchers say one core crew is running help-desk phone scams that have hit Point72, Citadel, Two Sigma and Millennium, then stealing data straight from their cloud accounts.

4 min read
A laptop screen displaying a simple repository interface with a single file being downloaded, surrounded by scattered warning symbols and alert notifications di
Threat Intelligence

The Week's Attacks Were Cheap, Ordinary, and Very Effective

Opening a repo, installing a package, or previewing a PDF was enough to hand attackers a foothold this week. None of it was sophisticated. All of it worked.

4 min read
An industrial facility control room with rows of monitoring stations, server racks glowing in the background, and a world map on a wall display with several loc
Threat Intelligence

Thousands of Rockwell Controllers Sit Exposed Online, With 22 in US Water Attack Cities

Security firm Forescout counted 4,407 industrial controllers reachable from the open internet, and found a small cluster in the same towns recently hit by attacks on water systems.

3 min read
Network hardware warehouse or manufacturing facility with rows of Zbtlink routers, factory equipment and assembly lines visible, with server racks and network m
Threat Intelligence

Twenty Chinese Router Models Ship From The Factory With A Hidden Backdoor

Researchers at VulnCheck say every current Zbtlink firmware image contains an implant that phones home to Chinese servers and hands attackers root access.

4 min read
© 2026 Threat Vectr