#blend

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Aug 17, 2026 // 23:54

Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in […]

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Jul 9, 2026 // 23:03

Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely […]