#how


The Invisible Thief: How One Spy Tool Evaded Detection for Years

Mar 10, 2026 // 15:24

Researchers have highlighted several long-standing or sophisticated spy tools that have been quietly exfiltrating data, most notably the resurgence of the Sednit (also known as APT28 or […]

How Hackers Use .arpa DNS and IPv6 to Bypass Phishing Security

Mar 8, 2026 // 18:38

Hackers are exploiting the .arpa top-level domain (TLD) and IPv6 infrastructure to bypass traditional phishing defenses. This method weaponizes a trusted part of the internet typically reserved for core […]

Silver Dragon: How APT41’s Newest Subgroup Uses Google Drive to Hide in Plain Sight

Mar 4, 2026 // 12:32

Silver Dragon, a sophisticated threat cluster linked to APT41, is currently targeting government entities across Southeast Asia and Europe. Active since mid-2024, the group utilizes a mix […]

Starkiller Phishing Kit: How Hackers Are Bypassing Your Multi-Factor Authentication

Mar 3, 2026 // 17:06

Starkiller is a sophisticated phishing-as-a-service (PhaaS) platform developed by a threat group called Jinkusu. It utilizes an Adversary-in-the-Middle (AitM) reverse proxy architecture to bypass multi-factor authentication […]

ClawJacked Alert: How Malicious Sites Can Secretly Hijack Your Local AI Agents

Feb 28, 2026 // 21:30

The ClawJacked flaw is a critical security vulnerability in the OpenClaw (formerly Moltbot/Clawdbot) AI agent that allows malicious websites to take full control of locally running agents. Discovered by […]

How the 1Campaign Platform Sneaks Malicious Google Ads Past Security Checks

Feb 25, 2026 // 00:54

The 1Campaign platform is a “cybercrime-as-a-service” suite used by attackers to launch malicious Google Ads while bypassing automated security filters. Key tactics and features of the platform […]

Previous 1 … 6 7 8