Vercel-hosted RMM abuse campaign evolves with Telegram C2 for victim filtering

Aisuru botnet: Early October attacks escalate into record-setting DDoS activity

Cloudflare participates in global operation to disrupt RaccoonO365

Attackers abusing Proofpoint & Intermedia link wrapping to deliver phishing payloads

New SSA-themed phishing campaign installs trojanized ScreenConnect

Cloudflare participates in global operation to disrupt Lumma Stealer

Loot, load, repeat: dissecting the Lumma Stealer playbook

SVGs: the hacker’s canvas

Black Basta’s blunder: exploiting the gang’s leaked chats

Bitcoin to the moon: Trump endorsing, scammers exploiting

Sacked or hacked? Unmasking employment termination scams

Inside LameDuck: analyzing anonymous Sudan’s threat operations

Unraveling SloppyLemming’s operations across South Asia

Freight fraud surge: global supply chain compromises

Disrupting FlyingYeti's campaign targeting Ukraine

Impersonation is fooling the enterprise

Malicious “RedAlert - Rocket Alerts”