ThreatVectr

Threat Intelligence — Page 20

Illustration: a dimly lit security operations centre at night
Threat Intelligence

AI-Powered Attackers Are Running Past Traditional Defences, CrowdStrike Data Suggests

With roughly four in five intrusions now leaving no malware behind, security teams are being forced to rethink what a break-in even looks like.

4 min read
Illustration: a dimly lit developer workstation at night
Threat Intelligence

Fake Newtonsoft.Json Package on NuGet Was Built to Rig Live Betting Games

A trojanised copy of a popular coding library targeted Digitain's gambling platform, quietly tampering with live game results.

3 min read
Illustration: a darkened server room with rows of rack servers, red status lights dimmed
Threat Intelligence

German and US police pull the plug on Kratos, a phishing kit rented to 1,800 crooks

Investigators seized more than 200 servers and arrested the developer in Indonesia, ending a service that ran roughly 15,000 fake Microsoft login campaigns every month.

3 min read
A cybercriminal's workspace with multiple monitors displaying calendar applications and email clients, showing how calendar entries contain encoded command inst
Threat Intelligence

HollowGraph Malware Hides Spy Commands Inside Microsoft 365 Calendar Entries

A newly identified piece of malware turns ordinary calendar appointments into a covert messaging system, letting criminals send instructions and steal files without ever touching a suspicious server.

3 min read
Illustration: a developer's dark wooden desk, glowing laptop screen showing an abstract green-on-black code repository
Threat Intelligence

Fake AI Tools on GitHub Are Hiding Malware, Researchers Find 7,600 Booby-Trapped Repos

A campaign called FakeGit is dressing up malicious code as AI helpers and developer tools to trick programmers into installing SmartLoader.

3 min read
Illustration: a dimly lit server rack in a small unmarked room, one door left ajar with light spilling into a corridor
Threat Intelligence

Careless malware crew leaves 1,048-file toolkit exposed on the open web

Rapid7 researchers grabbed the lot after the operators forgot to lock their delivery server. Inside: AI-written lures, dropper experiments and a live infostealer campaign hitting Windows users in Mexico.

3 min read
Illustration: a dimly lit office desk at night, a laptop screen glowing with a blurred calendar grid showing dates far
Threat Intelligence

HollowGraph Spies Hide Their Orders in Fake Calendar Events Dated 2050

A newly named espionage tool turns Microsoft 365 calendars into a secret mailbox, tucking instructions and stolen files into meetings set decades in the future.

3 min read
Illustration: a large outdoor venue or stadium surrounded by crowds
Threat Intelligence

Before Anyone Reaches the Gate: Why Event Security Starts in the Digital World

The real threats to a major concert, championship or political gathering often take shape online, days or weeks before the first fan walks through the door.

3 min read
Illustration: a dimly lit server room with rows of blue-lit rack equipment, one open rack door revealing exposed cabling
Threat Intelligence

A Week When Small Inputs Caused Big Damage

WordPress code execution, SonicWall zero-days, attacks on AI services, and a fresh SharePoint flaw made for a punishing seven days.

3 min read
Illustration: A weatherworn CCTV camera mounted on a concrete post at dusk overlooking an empty motorway in eastern Europe
Threat Intelligence

Russian spies are hijacking Europe's security cameras to watch weapons move to Ukraine

Dutch intelligence says a Kremlin unit is quietly logging into internet-connected CCTV to track military convoys, aid shipments and troop positions.

3 min read
A computer screen showing a fake software update or security warning pop-up window overlaying a browser interface, with cursor hovering near a suspicious downlo
Threat Intelligence

Microsoft Warns of Two ACR Stealer Campaigns Stealing Credentials Through Fake Fixes

Between late April and mid-June 2026, two separate criminal campaigns used a trick called ClickFix to persuade workers to hand over browser passwords, session tokens, and business documents, with no software flaw required.

3 min read
Illustration: a developer workstation at night, glowing terminal window on a matte black laptop screen showing generic
Threat Intelligence

SleeperGem: Three Booby-Trapped Ruby Packages Slip Onto RubyGems

Researchers say the malicious gems sat quietly on the official Ruby package registry, waiting to pull down further attacker code onto developer laptops.

3 min read
Illustration: a dimly lit server room in a Russian government building
Threat Intelligence

Hackers hijack Russian security tool ViPNet to spy on government agencies

A campaign called HelloNet has been slipping malicious files into ViPNet updates since May, hitting Russian ministries, energy firms and transport operators.

3 min read
Illustration: a laptop screen in a dim office, showing a generic fake verification prompt with a highlighted keyboard
Threat Intelligence

Russian Military Hackers Trick Ukrainians Into Infecting Their Own PCs

Ukraine's cyber emergency team says a Sandworm sub-group is using fake CAPTCHA prompts to plant data-stealing malware.

3 min read
A smartphone screen displaying encrypted chat messages and contact lists, positioned on a desk next to scattered documents and a pair of reading glasses, shot f
Threat Intelligence

Moroccan Intelligence Insider Blows Whistle on Years of Pegasus Spyware Targeting

A former spy describes how Morocco reportedly used phone-hacking software since 2017 to surveil journalists, human rights workers, and foreign politicians, including cabinet ministers in Spain and officials in France.

3 min read
© 2026 Threat Vectr