Researchers identified a Chinese threat actor, CL-UNK-1068, conducting a multi-year campaign against critical infrastructure in South, Southeast, and East Asia. These attacks target high-stakes sectors like aviation, […]
Hackers are exploiting the .arpa top-level domain (TLD) and IPv6 infrastructure to bypass traditional phishing defenses. This method weaponizes a trusted part of the internet typically reserved for core […]
A critical zero-day vulnerability in the User Registration & Membership plugin for WordPress (CVE-2026-1492) is currently being exploited to create unauthorized administrator accounts. The flaw allows unauthenticated […]
Starkiller is a sophisticated phishing-as-a-service (PhaaS) platform developed by a threat group called Jinkusu. It utilizes an Adversary-in-the-Middle (AitM) reverse proxy architecture to bypass multi-factor authentication […]
Madison Square Garden (MSG) Entertainment Corp. has confirmed a data breach stemming from a cybersecurity incident that occurred in August 2025. The company began notifying affected […]
North Korean threat actors, specifically the FAMOUS CHOLLIMA group (linked to Lazarus), published 26 malicious npm packages in late February 2026 as part of the ongoing “Contagious […]
Security researchers have linked the North Korean state-backed Lazarus Group—specifically its subgroup Andariel (also known as Stonefly) —to a series of extortion attacks using Medusa ransomware. This marks the first […]
In a clever bit of “corporate” rebranding, cybercriminals have launched a professional-looking business website to sell a Remote Access Trojan (RAT) by disguising it as a legitimate Remote […]
© Bulletproof Servers. All rights reserved.