CISA CI Fortify: Critical Infrastructure Must Survive Weeks of Isolation
CISA's CI Fortify initiative requires critical infrastructure operators to sustain operations for weeks to months in isolation from IT networks and third-party vendors,
News
News
DAEMON Tools Supply Chain Attack Deploys QUIC RAT Backdoor
Hackers trojanized DAEMON Tools versions 12.5.0.2421–12.5.0.2434 since April 8, 2026, deploying a multi-stage QUIC RAT backdoor to thousands of systems in 100+ countries.
News
India SEBI Issues Mythos AI Red Alert to Financial Sector
India's SEBI ordered 19 classes of regulated entities to overhaul cybersecurity posture immediately, citing Anthropic's Mythos AI vulnerability-discovery capabilities.
News
Quasar Linux (QLNX): Rootkit and PAM Backdoor Targeting Developer Credentials
Trend Micro discovered QLNX, a stealthy Linux RAT with LD_PRELOAD rootkit, kernel eBPF component, and PAM backdoor that steals AWS, npm, PyPI, and
News
Taiwan High-Speed Rail TETRA Hack Halts Four Trains Using Cheap SDR
A student used a $30 SDR to spoof TETRA emergency signals and halt four Taiwan High Speed Rail trains for 48 minutes. Full
News
DAEMON Tools Supply Chain Attack: Official Installers Backdoored by Suspected Chinese APT
Kaspersky found DAEMON Tools versions 12.5.0.2421–12.5.0.2434 compromised with a signed backdoor and QUIC RAT since April 8, 2026. Attack is ongoing.
Blog
PRC State-Sponsored Telecom Router Compromise Detection: CISA AA25-239a Breakdown
CISA AA25-239a: PRC actors compromise telecom backbone routers for persistence. Detection commands, MITRE TTPs, and eviction steps for ISPs.
News
FTC Bans Kochava from Selling Location Data Without Consent in Settlement
The FTC has banned data broker Kochava and subsidiary CDS from selling precise location data without explicit consent, settling a 2022 lawsuit over
News
Latvian Conti/Karakurt Ransomware Negotiator Deniss Zolotarjovs Sentenced to 102 Months in Prison
Deniss Zolotarjovs, 35, sentenced to 102 months for his role in the Conti/Karakurt/Akira ransomware ecosystem — leaking children's health records to extort victims.
Blog
North Korea Cryptocurrency Theft Tactics 2026: How DPRK Seized 76% of All Stolen Crypto
DPRK accounts for 76% of all crypto stolen in 2026 via two precision attacks on Drift and KelpDAO. Full TTP analysis, laundering chain