Threat hunters are warning that the cybercriminal operation known as VECT 2.0 acts more like a wiper than a ransomware due to ...
A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged ...
UNC6692 relies on email bombing and social engineering to infect victims with Snow malware: Snowbelt, Snowglaze, and ...
Targeting high-precision floating-point arithmetic operations in engineering modeling software, Fast16 may now be the ...
Over 750,000 websites require patching following discovery of DotNetNuke XSS vulnerability ...
SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.
Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...
Lazarus continues leveraging ClickFix for initial access and data theft, in this case, against Mac-centric organizations and ...
Not everything they claim is worthwhile ...
A newly identified threat group, UNC6692, has been caught running a sophisticated cyberattack campaign that uses Microsoft ...
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...