Ken Underhill

ShadyPanda spent years hiding inside Google-verified extensions before unleashing an RCE backdoor that compromised 4.3 million users.

A man who ran fake airport and in-flight Wi-Fi networks to steal traveler credentials has been sentenced to over seven years in prison.

A new Shai-hulud variant turns trusted npm installs into a stealthy path for cloud-credential theft and supply chain compromise.

Hijacked calendar subscriptions are emerging as a stealthy new way for attackers to push phishing and malware directly onto devices.

A massive Coupang breach exposed nearly 34 million customers, highlighting insider-risk dangers and gaps in South Korea’s data protections.

Xillen Stealer v5 uses AI-themed evasion and expanded targeting to advance credential-theft tactics.

Attackers used a compromised admin account to breach the French Football Federation and steal sensitive member data.

A critical flaw in vLLM allows attackers to crash AI servers or execute code remotely by sending malicious prompt embeddings to the Completions API.

A new HashiCorp Vault bug lets attackers bypass LDAP authentication entirely.

Five critical Fluent Bit flaws could let attackers alter logs, crash agents, or run code in cloud environments.

Researchers say Russia’s Gamaredon and North Korea’s Lazarus may be sharing infrastructure — a rare APT collaboration.

A months-long breach at Delta Dental of Virginia exposed data from over 145K customers.