Category Archives: Threat Alerts
Kuse AI Phishing Campaign Leverages Trusted Workplace App for Credential Theft
A sophisticated Kuse AI phishing campaign is abusing the legitimate storage features of the popular workplace application to bypass email filters and harvest corporate credentials. Continue reading
AI-Enhanced npm Malware: North Korea’s Operation Masquerade Hits SAP
North Korean state-sponsored actors have launched Operation Masquerade, using AI-enhanced npm malware to infiltrate enterprise software supply chains and steal credentials. Continue reading
Europol IOCTA 2026: The Rise of AI-Driven Cyber-Extortion
The Europol IOCTA 2026 report reveals a fundamental transformation in cyber-extortion, highlighting the industrialisation of cybercrime through generative AI and pure data theft. Continue reading
Booking.com Phishing: Sophisticated In-Platform Scams Target Travelers
Cybersecurity experts warn of a sophisticated Booking.com phishing surge where attackers hijack property accounts to send fraudulent payment links through legitimate messaging systems. Continue reading
Frontier AI Cyber Risks: CERT-In Issues High-Severity Advisory
The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity alert regarding Frontier AI Cyber Risks, highlighting how autonomous models are automating complex network intrusions. Continue reading
Windows Shell Vulnerability CVE-2026-32202 Under Active Exploitation
Microsoft warns that a high-severity Windows Shell vulnerability, tracked as CVE-2026-32202, is being actively exploited to compromise system security. Continue reading
Signal Phishing Campaign Targets High-Profile German Officials
A sophisticated Signal phishing campaign has compromised over 300 high-profile German targets, including cabinet ministers and diplomats, using social engineering to hijack encrypted accounts. Continue reading
Axios Backdoor: Lead Maintainer Compromised via Social Engineering
A critical Axios backdoor has been identified after a lead maintainer fell victim to social engineering, enabling a massive supply chain compromise. Continue reading
ShinyHunters Extortion Wave: ADT, Udemy, and Vimeo Hit by Vishing
The current ShinyHunters extortion wave leverages sophisticated vishing techniques to compromise SSO credentials and exfiltrate data from ADT, Udemy, and Vimeo. Continue reading