Real-time Actionable Vulnerability Intelligence

August 5, 2026

ChainDrop attack infects over 2,200 NPM packages after GitHub account compromise

The attack, called ChainDrop, began after hackers infected the keyv and cacheable packages.

2 min read

August 5, 2026

Hackers could use AI email assistants to target CEOs

Researchers started with a lower-level employee's compromised email account and used the AI assistant to gather information and plan an attack.

2 min read

August 5, 2026

INC Ransomware exploits SonicWall flaws in new attacks

Researchers said INC Ransomware was not the first group to abuse the flaws, but it has been the most aggressive in combining both vulnerabilities into a full attack chain.

2 min read

August 5, 2026

SMOKE#SCREEN campaign using fake software updates to deploy RATs

The campaign uses multiple malware components, including VBScript droppers, batch scripts, .NET executables, and phishing HTML pages.

2 min read

August 4, 2026

Chinese-speaking threat actor uses leaked DarkSword exploit kit to target iOS devices

Censys noted possible links between DarkSword and Coruna and the UNC6353 threat actor, which has been linked to attacks on Ukraine.

3 min read