Ken Underhill

DeceptiveDevelopment blends job fraud and malware, using social engineering and insider tactics to compromise developers and crypto firms.

Threat actors exploit Dynamic DNS for resilient C2 networks. Learn why DDNS abuse matters and how defenders can respond.

Vulnerability in Notepad++ enables DLL hijacking, exposing users to code execution, persistence, and malware risks.

Strong passwords, MFA, and updates protect your devices. Learn why small habits at home make a big difference in cybersecurity.

CISA warns of active Cisco ASA exploits. Patch now to block remote code execution and privilege escalation risks.

Fake PyPI login site phishing campaign threatens developer credentials and the open-source supply chain.

Vietnamese hackers use fake copyright notices and Telegram-based malware to steal data and crypto in a growing phishing campaign.

China-linked hackers use BRICKSTORM malware to hit tech, SaaS, and legal firms, threatening the US supply chain.

Cisco TACACS+ vulnerability threatens sensitive data.

ShadowV2 exploits AWS Docker flaws to deliver advanced DDoS-for-hire attacks.

Ransomware cripples European airports, forcing manual check-ins and mass delays.

Stellantis breach tied to Salesforce hack exposes millions of customer records.