Guardarian Users Targeted With Malicious Strapi NPM Packages
Hackers published 36 NPM packages posing as Strapi plugins to execute shells, escape containers, and harvest credentials. The post Guardarian […]
Uncategorized
Uncategorized
Uncategorized
North Korean Hackers Target High-Profile Node.js Maintainers
The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign.
Uncategorized
$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation
Zscaler ThreatLabz 2026 VPN Risk Report with Cybersecurity Insiders. AI collapsed human response window and turned remote access into fastest
Uncategorized
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
Zscaler ThreatLabz 2026 VPN Risk Report with Cybersecurity Insiders. AI collapsed human response window and turned remote access into fastest
Uncategorized
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Zscaler ThreatLabz 2026 VPN Risk Report with Cybersecurity Insiders. AI collapsed human response window and turned remote access into fastest
Uncategorized
European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack
Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information. The post European Commission Confirms Data
Uncategorized
China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
Zscaler ThreatLabz 2026 VPN Risk Report with Cybersecurity Insiders. AI collapsed human response window and turned remote access into fastest
Uncategorized
Why Third-Party Risk Is the Biggest Gap in Your Clients' Security Posture
Zscaler ThreatLabz 2026 VPN Risk Report with Cybersecurity Insiders. AI collapsed human response window and turned remote access into fastest
Uncategorized
UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack
Zscaler ThreatLabz 2026 VPN Risk Report with Cybersecurity Insiders. AI collapsed human response window and turned remote access into fastest
Uncategorized
TrueConf Zero-Day Exploited in Asian Government Attacks
A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads. The post