Jscrambler npm Compromise Shows Build Pipelines Need Runtime Controls
Ghost Phishing Shows Why Email Security Must Follow the Browser
Pakistani Police Intrusions Show Why Public-Sector Data Systems Are Strategic Targets
Bad Epoll Shows Linux Kernel LPEs Belong in the Patch Priority Queue
Fake Payment SDKs Show Why Dependency Risk Is Credential Risk
Critical UniFi Flaws Put Network Control Planes Back in the Patch Queue
Vidar Stealer Campaign Shows Why File Size and Fake Signatures Still Beat Weak Controls
ADFS Signing Keys Show Why Federation Servers Are Tier-Zero Identity Infrastructure
UAT-7810 Shows Edge Devices Are Becoming China-Nexus Relay Infrastructure
FortiBleed Shows Firewall Credentials Are Ransomware Fuel
NetNut and Popa Takedown Shows Residential Proxies Are Now Attack Infrastructure
Vect and TeamPCP Show Supply-Chain Credentials Are Ransomware Fuel
Ousaban Shows Banking Trojans Are Learning to Hide From Sandboxes
NUT upsmon Command Injection Shows UPS Monitoring Belongs in the Patch QueueIndicator of Compromise
A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.
Included in the Domains feed (live, machine-readable).
Related indicators
Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.
We use Google Analytics to measure site traffic, which sets cookies. No ads and no cross-site tracking. See our privacy policy.
