2026-03-31 23:30 UTC
Security Journalism
Security Journalism
Supply Chain Compromise of axios npm Package
An NPM supply chain attack struck the ubiquitous open-source axios library and Huntress has observed over a hundred affected devices.
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 161 matching records.
AUTO-POLL // 2026-10-09 22:15 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P5 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 9
RANSOMWARE
P5
COOL // 62 ARTICLES
THU
Oct 8
RANSOMWARE
P3
COOL // 62 ARTICLES
WED
Oct 7
RANSOMWARE
P5
COOL // 86 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
SUN
Oct 4
RANSOMWARE
P10
WARM // 11 ARTICLES
SAT
Oct 3
RANSOMWARE
P4
COOL // 14 ARTICLES
2026-03-25 12:13 UTC
Other
Other
Esquema de Phishing GTFire: Evitando la detección mediante servicios de Google
Cómo GTFire abusa de Google Firebase y Google Translate para escalar campañas globales de phishing
P0
2026-03-18 14:00 UTC
Security Journalism
Security Journalism
Something Phishy in the /tmp Folder
Huntress’ AI-Centric SOC recently stopped a MacSync infostealer attack on a macOS device. The malware attempted to scrape credentials, browser cookies, and crypto wallets, but Huntress contained the threat before any data was sent to the attacker. Learn how we did it.
P0
2026-01-22 10:00 UTC
Other
Other
Common Apple Pay scams, and how to stay safe
Here’s how the most common scams targeting Apple Pay users work and what you can do to stay one step ahead
P0
2026-01-13 06:39 UTC
Other
Other
PCI DSS v4.0.1 for Payment Integrations: A Realistic Security-First Approach
Modern payment integrations are fast, flexible, and increasingly complex. APIs talk to gateways, webhooks trigger state changes, third parties handle fraud, retries, refunds, and orchestration layers quietly sit in between. In most teams, the signal that things are “working” is simple: transactions go through. That signal is misleading. At RedHunt Labs, we found that the real-world payment pentests reveal the common mistake of treating PCI DSS as a finish line instead of a baseline. This blog r…
P0
2026-01-13 06:00 UTC
Security Journalism
Security Journalism
Cross-Platform Unity in EDR
Huntress researchers weigh in on the challenge of getting feature parity across Windows, macOS, and Linux. And learn how unique security models and platform maturity shape the way products are built.
P0
2025-12-22 11:40 UTC
Other
Other
Explore Payment Gateways Through an Attacker’s Lens | Inside the Payment Gateway Integrations Security Handbook
Payment gateways are built to move money reliably. Attackers view them as systems built on trust, timing, and assumptions. A gateway that works consistently is not a sign of safety. It is a stable environment to study, probe, and eventually abuse. This blog examines payment gateways from an attacker’s perspective, grounded in real exploitation patterns and reinforced with direct insights from industry experts. These patterns are documented extensively in the RedHunt Labs Payment Gateway Integra…
P0
2025-12-09 06:00 UTC
Security Journalism
Security Journalism
AI-Poisoning & AMOS Stealer: The Biggest Mac Threat | Huntress
Attackers are exploiting user trust in AI and aggressive SEO to deliver an evolved Atomic macOS Stealer. Learn why this social engineering tradecraft bypasses traditional network controls and the future of macOS infostealer defense.
P0
2025-12-03 16:59 UTC
Vendor Research
Vendor Research
Android expands pilot for in-call scam protection for financial apps
Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading features to detect scams and protect users across phone calls, text messages and messaging app chat notifications. These efforts are making a real difference in the lives of Android users. According to a recent YouGov sur…
P0
2025-11-20 17:00 UTC
Vendor Research
Vendor Research
Android Quick Share Support for AirDrop: A Secure Approach to Cross-Platform File Sharing
Posted by Dave Kleidermacher, VP, Platforms Security & Privacy, Google Technology should bring people closer together, not create walls. Being able to communicate and connect with friends and family should be easy regardless of the phone they use. That’s why Android has been building experiences that help you stay connected across platforms. As part of our efforts to continue to make cross-platform communication more seamless for users, we've made Quick Share interoperable with AirDrop, allowin…
P0
2025-10-30 16:59 UTC
Vendor Research
Vendor Research
How Android provides the most effective protection to keep you safe from mobile scams
Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Nieto, Sr. Product Manager Google Messages and RCS Spam and Abuse; Vijay Pareek, Manager, Android Messaging Trust and Safety As Cybersecurity Awareness Month wraps up, we’re focusing on one of today's most pervasive digital threats: mobile scams. In the last 12 months, fraudsters have used advanced AI tools to create more convincing schemes, resulting in over $400 billion in stolen funds globally.¹ For years, Android …
P0
2025-09-10 15:59 UTC
Vendor Research
Vendor Research
How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials
Posted by Eric Lynch, Senior Product Manager, Android Security, and Sherif Hanna, Group Product Manager, Google C2PA Core At Made by Google 2025, we announced that the new Google Pixel 10 phones will support C2PA Content Credentials in Pixel Camera and Google Photos. This announcement represents a series of steps towards greater digital media transparency: The Pixel 10 lineup is the first to have Content Credentials built in across every photo created by Pixel Camera. The Pixel Camera app achie…
P0
2025-09-09 05:54 UTC
Other
Other
AI-Powered Celebrity Impersonation Scams: A Threat Intelligence Report by RedHunt Labs
Introduction A new wave of AI-powered investment scams is targeting Indian users on Facebook and Instagram, luring them with fake celebrity endorsements and deepfake interviews. Ads featuring figures like Nirmala Sitharaman, Sadhguru, and Neha Kakkar promote fraudulent schemes, directing users to counterfeit news websites mimicking The Times of India, IndiaTime, and NDTV. These sites claim celebrities have built fortunes using exclusive investment strategies, persuading victims to deposit ₹21,0…
P0
2025-06-18 05:00 UTC
Security Journalism
Security Journalism
Inside the BlueNoroff Web3 macOS Intrusion Analysis
Learn how DPRK's BlueNoroff group executed a Web3 macOS intrusion. Explore the attack chain, malware, and techniques in our detailed technical report.
P0
2025-06-11 05:00 UTC
Security Journalism
Security Journalism
Extending Threat Coverage on Macs with XProtect and | Huntress
Enhance Mac security with Huntress Managed EDR's new coverage for Apple XProtect and Microsoft Defender for Endpoint. Learn how we can protect your macOS.
P0
2025-05-10 00:00 UTC
Other
Other
FreeRTOS and coreSNTP Security Advisories
Security advisories were issued for FreeRTOS and coreSNTP releases containing unintended scripts that could potentially transmit AWS credentials if executed on Linux/macOS. Affected releases have been removed and users are advised to rotate credentials and delete downloaded copies.
P0
2025-04-22 05:00 UTC
Security Journalism
Security Journalism
Say Hello to Mac Malware
In this month’s Tradecraft Tuesday, we talked about how threat actors are finetuning their macOS malware in order to maintain persistent access and avoid detection by Apple’s security features.
P0
2025-01-23 00:00 UTC
Other
Other
AWS Sign-in IAM User Login Flow Username Enumeration
A vulnerability in AWS IAM Sign-in login flow could allow attackers to enumerate IAM usernames by measuring server response times. This issue affected AWS Sign-in IAM User login flow prior to January 16, 2025. AWS has since introduced a delay in response times across all authentication failure scenarios to mitigate the vulnerability.
P0
2025-01-14 00:00 UTC
Government
Government
[MàJ] Vulnérabilité dans les produits Fortinet (14 janvier 2025)
\[Mise à jour du 28 janvier 2025\] Une preuve de concept permettant l'exploitation de cette vulnérabilité est disponible publiquement. Le 14 janvier 2025, Fortinet a publié un avis de sécurité concernant la vulnérabilité critique CVE-2024-55591 affectant FortiOS et FortiProxy. Elle permet à un...
P5
2024-10-23 18:18 UTC
Security Journalism
Security Journalism
Ask the Mac Guy: What's the Deal with Full Disk Access for Mac? | Huntress
Learn about the importance of Full Disk Access for Mac, its role in macOS security, and how it affects app performance and functionality.
P0
2024-10-02 05:55 UTC
Other
Other
Pig Butchering Alert: Fraudulent Trading App targeted iOS and Android users
In this article, Group-IB specialists uncovered a large-scale fraud campaign involving fake trading apps targeting Apple iOS and Android users across multiple regions through the UniApp framework, and distributed through official app stores and phishing sites.
P0
2024-06-13 00:00 UTC
Security Journalism
Security Journalism
Debunking 5 Major macOS Myths | Huntress
Let Huntress debunk the biggest Mac security myths. macOS is now a popular target for hackers, so learn the truth about its vulnerabilities and discover practical steps to enhance protection against cyber threats.
P0
2024-06-05 09:01 UTC
Other
Other
GoldPickaxe exposed: How Group-IB analyzed the face-stealing iOS Trojan and how to do it yourself
Learn how to protect your devices against evolving iOS threats
P0
2024-06-04 00:00 UTC
Security Journalism
Security Journalism
Macs Need Security Too: Announcing Huntress Managed EDR for macOS | Huntress
As macOS adoption rises, so too do cyber threats against it. That’s why Huntress developed our Managed EDR for macOS, a security solution tailored to the unique challenges of macOS environments.
P0
2024-04-25 00:00 UTC
Security Journalism
Security Journalism
LightSpy Malware Variant Targeting macOS | Huntress
There's a new variant of LightSpy malware targeting macOS. Here, Huntress' macOS researchers dive into the macOS variant of the LightSpy malware, after gaps in recent reports stating that the LightSpy malware strictly targets iOS.
P0
2024-03-15 08:04 UTC
Other
Other
In-Depth Analysis of Pegasus Spyware and How To Detect It on Your Mobile Devices
Pegasus infects mobile devices through zero-click exploits and silently harvests messages, calls, location, and microphone access. Learn how the spyware operates and the steps security teams can take to detect it on iOS and Android.
P0
2024-03-11 00:00 UTC
Security Journalism
Security Journalism
Full Transparency: Controlling Apple's TCC (Part 2) | Huntress
The primary goal of Apple's Transparency, Consent, and Control (TCC) is to empower users with transparency regarding how their data is accessed and used by applications. In this Part 2, dig even deeper into the mechanism that runs TCC and what's happening in the background.
P0
2024-02-15 08:02 UTC
Other
Other
Face Off: Group-IB identifies first iOS trojan stealing facial recognition data
Group-IB uncovers the first iOS Trojan harvesting facial recognition data used for unauthorized access to bank accounts. The GoldDigger family grows
P0
2024-02-09 00:00 UTC
Government
Government
[MàJ] Vulnérabilité dans Fortinet FortiOS (09 février 2024)
\[Mise à jour du 19 mars 2024\] Le CERT-FR a connaissance de codes d'exploitation publics et de nouvelles tentatives d'exploitation. Le 8 février 2024, Fortinet a publié l'avis de sécurité concernant la vulnérabilité critique CVE-2024-21762 affectant le VPN SSL de FortiOS. Cette vulnérabilité...
P5
2024-01-16 00:00 UTC
Security Journalism
Security Journalism
Full Transparency: Controlling Apple's TCC | Huntress
Dive into Apple's TCC framework, decoding its role in user privacy. Explore permissions, challenges, and the encryption safeguarding sensitive data.
P0