LIVE NEWSROOM · --:-- · May 13, 2026
A LIBRARY FOR SECURITY RESEARCHERS

Threat intel,
decoded &
skills sharpened.

Daily breach reporting, CVE deep-dives, and hands-on hacking tutorials — written by practitioners for the analysts, defenders, and learners who actually do the work.


279+ARTICLES PUBLISHED
DailyTHREAT UPDATES
2021TRUSTED SINCE

Latest News

View all →

YARA-X 1.16.0: Faster Scans, Panic Fixes, and Neovim LSP Support

May 12, 2026·NewsYARA-X 1.16.0 ships with performance improvements across 10 PRs, constant folding for bitwise ops, configurable match context, and two panic-condition bugfixes.

Instructure Removed from ShinyHunters' Leak Site as Canvas Breach Deadline Passes

May 12, 2026·NewsInstructure was quietly removed from ShinyHunters' extortion site after the May 12, 2026 deadline — no data dump, no explanation, no ransom confirmation.

Costa Rica Joins Have I Been Pwned as the 42nd Government

May 12, 2026·NewsCosta Rica's CSIRT gains free access to Have I Been Pwned's government domain monitoring service, becoming the 42nd nation in the global breach visibility program.

LummaC2 Infostealer Targets US Critical Infrastructure: CISA-FBI Advisory AA25-141B and DOJ Domain Seizures

May 12, 2026·NewsCISA and FBI advisory AA25-141B details LummaC2 MaaS infostealer TTPs targeting critical infrastructure. DOJ seized 2,300 domains. Detection and mitigation guide.

MacSync Stealer: Hackers Abuse Google Ads and Claude.ai Chats to Push Mac Malware

May 12, 2026·NewsRussian-speaking attackers combine Google Ads and Claude.ai shared chats in a ClickFix campaign deploying MacSync Stealer infostealer on macOS. Over 200 malicious ads active.

JDownloader Site Hacked, Installers Swapped with Python RAT Malware

May 11, 2026·NewsJDownloader's website was hacked May 6–7, 2026, replacing Windows and Linux installers with a Python-based RAT. Users who downloaded during that window should reinstall their OS.

Operation HookedWing: 4-Year Phishing Campaign Hits 500+ Organizations Across Aviation, Energy, and Logistics

May 11, 2026·NewsOperation HookedWing has stolen credentials from 500+ organizations in aviation, energy, logistics, and critical infrastructure by abusing GitHub Pages as phishing infrastructure since 2022.

Twelve Critical vm2 Node.js Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

May 11, 2026·NewsA dozen CVEs in the vm2 Node.js sandbox library — including CVSS 10.0 flaws — allow sandbox escape and RCE. Update to vm2 3.11.2 now or migrate to isolated-vm.
Scroll to Top