GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data
î „Ravie Lakshmananî ‚Mar 25, 2026Browser Security / Threat Intelligence Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that…
Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
Cybersecurity researchers are calling attention to an active device code phishing campaign that’s targeting Microsoft 365 identities across more than…
Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks
î „The Hacker Newsî ‚Mar 25, 2026Cybercrime / Ransomware The U.S. Department of Justice (DoJ) said a Russian national has been sentenced…
The Kill Chain Is Obsolete When Your AI Agent Is the Threat
In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber…
FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns
î „Ravie Lakshmananî ‚Mar 25, 2026Network Security / Data Protection The U.S. Federal Communications Commission (FCC) said on Monday that it was…
TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise
TeamPCP, the threat actor behind the recent compromises of Trivy and KICS, has now compromised a popular Python package named…
Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR
î „Ravie Lakshmananî ‚Mar 24, 2026Endpoint Security / Social Engineering A large-scale malvertising campaign active since January 2026 has been observed targeting…
Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner
î „Ravie Lakshmananî ‚Mar 24, 2026Malware / Endpoint Security An ongoing phishing campaign is targeting French-speaking corporate environments with fake resumes that…
5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents
On February 25, 2026, Gartner published its inaugural Market Guide for Guardian Agents, marking an important milestone for this emerging…
Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive…