Ken Underhill

Arkanix Stealer is a fast-evolving infostealer spreading through Discord to harvest credentials, wallets, and system data.

A Codex CLI flaw lets attackers turn simple repo files into hidden execution triggers.

ShadyPanda spent years hiding inside Google-verified extensions before unleashing an RCE backdoor that compromised 4.3 million users.

A man who ran fake airport and in-flight Wi-Fi networks to steal traveler credentials has been sentenced to over seven years in prison.

A new Shai-hulud variant turns trusted npm installs into a stealthy path for cloud-credential theft and supply chain compromise.

Hijacked calendar subscriptions are emerging as a stealthy new way for attackers to push phishing and malware directly onto devices.

A massive Coupang breach exposed nearly 34 million customers, highlighting insider-risk dangers and gaps in South Korea’s data protections.

Xillen Stealer v5 uses AI-themed evasion and expanded targeting to advance credential-theft tactics.

Attackers used a compromised admin account to breach the French Football Federation and steal sensitive member data.

A critical flaw in vLLM allows attackers to crash AI servers or execute code remotely by sending malicious prompt embeddings to the Completions API.

A new HashiCorp Vault bug lets attackers bypass LDAP authentication entirely.

Five critical Fluent Bit flaws could let attackers alter logs, crash agents, or run code in cloud environments.