13 article(s) in our index mention this organisation.
A previously undocumented Brazilian banking malware operation, dubbed KREMLIN, has been identified by Elastic Security Labs. The threat actor, active since May 2025, utilizes a multi-stage approach involving JavaScript l…
Multiple vulnerabilities have been discovered in Elastic Kibana, potentially allowing attackers to elevate privileges, cause denial-of-service attacks, and compromise data confidentiality. These vulnerabilities affect sp…
Multiple vulnerabilities have been discovered in Elastic products. Some of these vulnerabilities allow an attacker to cause arbitrary code execution, privilege escalation, and data confidentiality breaches. These vulnera…
The China-linked threat actor Jewelbug, operating as a ‘hack-for-hire’ group, is engaged in both sophisticated government espionage targeting nations across the Middle East, Southeast Asia, and South Asia, and cryptocurr…
Multiple vulnerabilities have been discovered in Elastic Kibana. Some of these vulnerabilities allow for privilege escalation, remote denial-of-service, and data confidentiality compromise. Elastic has released several s…
NVIDIA has formed the Open Secure AI Alliance, a 37-member group focused on developing open technologies and tools for securing AI agents and software. The alliance’s core contribution, NOOA, is a Python framework design…
Multiple vulnerabilities have been discovered in Elastic products, including Elasticsearch and Kibana. These vulnerabilities can lead to data integrity compromise, data confidentiality breaches, and denial-of-service att…
North Korean threat actors, linked to the Contagious Interview campaign (REF9403), are using fake coding tests and SVG images containing steganography to deliver a multi-stage malware payload – OtterCookie – to software…
A new modular malware, TELEPUZ, is spreading via ClickFix lures and is being developed by a solo developer or small team. The malware steals data, runs commands, and evades detection through various techniques, including…
A new malware loader, dubbed OXLOADER, is being used to distribute the CastleStealer information stealer through malicious Google Ads. The campaign, codenamed REF8372, leverages deceptive advertising and PowerShell execu…
This episode of Smashing Security discusses a recent incident where ShinyHunters, a known threat actor, compromised the networks of several major universities. The attackers leveraged a vulnerability to gain access, targ…
This podcast episode discusses a recent corporate hack stemming from an individual attempting to cheat at the Roblox game. The incident involved a developer gaining unauthorized access to a Microsoft 365 tenant, disablin…
A data breach occurred at Rockstar Games, stemming from a hacker gaining access to the company's systems. The stolen data, initially believed to be embarrassing, ultimately revealed sensitive internal communications, inc…
