All Related Articles for: CISA releases Thorium: Open-source malware & forensic analysis tool
-
CISA integrates its vulnerability disclosure lessons into new guidance
CISA and allied cyber authorities released new guidance for…
Read More » -
CISA Built Its Incident Playbook Mid-Crisis, Agency Reveals
CISA lacked a pre-existing incident response plan when a…
Read More » -
CISA Details Response to Exposed AWS GovCloud Keys
CISA accidentally exposed sensitive AWS GovCloud credentials and internal…
Read More » -
CISA warns of critical Ubiquiti flaws exploited in attacks
CISA has added three Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908,…
Read More » -
1Password acquires Apono to manage AI-agent access
1Password acquired Israeli startup Apono for an estimated $250-300…
Read More » -
Microsoft hit again by credential-stealing malware in software packages
Microsoft's compromised open source packages on GitHub contained credential-stealing…
Read More » -
Red Hat npm packages hit by new Mini Shai-Hulud malware wave
On June 1, 2026, over 30 npm packages tied…
Read More » -
Red Hat NPM channel hit by backdoored packages
A supply-chain attack breached official Red Hat NPM accounts…
Read More » -
Microsoft criticized for threatening security researcher with criminal probe
Microsoft threatened legal action against security researcher “Nightmare Eclipse”…
Read More » -
Hacked GitHub via tainted VS Code extension
GitHub confirmed a security breach after TeamPCP infiltrated its…
Read More » -
GitHub Confirms 3,800 Repos Breached via Malicious VSCode Extension
A GitHub employee's device was compromised after installing a…
Read More » -
US lawmakers press Instructure for answers on Canvas data breaches
U.S. House Homeland Security Committee Chair Andrew Garbarino has…
Read More » -
CheckMarx Jenkins package compromised by infostealer
Hacker group TeamPCP published a malicious version (2026.5.09) of…
Read More » -
New Quasar Linux malware stealthily targets software developers
Quasar Linux (QLNX) is a sophisticated new backdoor targeting…
Read More » -
Phishers abuse Amazon SES to evade detection
Attackers are exploiting Amazon Simple Email Service (SES) to…
Read More » -
CISA Adds Actively Exploited Linux Root Bug to KEV List
CISA added Linux kernel vulnerability CVE-2026-31431 ("Copy Fail") to…
Read More » -
CISA and Partners Release Zero Trust Guidance for OT Security
A new cross-government guide from CISA and federal partners…
Read More » -
Open source package with 1M monthly downloads stole user credentials
Attackers exploited a vulnerability in a GitHub action workflow…
Read More » -
Firestarter malware evades Cisco firewall updates and patches
U.S. and U.K. cybersecurity authorities warn of the custom-built…
Read More » -
Vercel Confirms Security Breach
Vercel confirmed a security breach where a "highly sophisticated"…
Read More »