Cloudflare workerd Bugs Show Why Agent Sandboxes Need Real Defense-in-Depth
Langflow RCE Shows Why AI Workflow Tools Need Cloud-Grade Isolation
BINDCLOAK Shows Why C2 Detection Needs Message-Level Visibility
Passkey Attacks Show Why Passwordless Still Needs Endpoint Defense
DPRK npm Compromises Show Why Dependency Trust Is Now Identity Risk
N-able N-central Exploitation Shows Why MSP Tools Are Control-Plane Risk
HOLLOWGRAPH Shows Why Microsoft 365 Is Now Part of the C2 Battlefield
Fuyao Android TV Botnet Shows Why Cheap Streaming Sticks Are Business Network Risk
SonicWall SMA Exploit Chain Shows Why VPN Appliances Need Incident Response, Not Just Patching
Adform Script Compromise Shows Why Third-Party Tags Need Supply-Chain Controls
CaptiveCrunch Shows Why Travel Wi-Fi Is Now an Identity Attack Surface
XCSSET v40 Shows Why Developer Macs Are Supply-Chain Infrastructure
84 4G/5G Core Flaws Show Why Telecom Trust Zones Need Zero Trust
Astaroth WhatsApp Web Spambot Shows Browser Sessions Are Distribution InfrastructureIndicator of Compromise
A domain observed in malicious infrastructure. Block or monitor it in DNS and web proxies. Shown defanged for safe viewing; use Copy live value for the functional form.
Included in the Domains feed (live, machine-readable).
Newsletter
Two short reads a day on markets, cyber threats, AI, and geopolitics. A "why it matters" line on every story.
readers get The Brief
Double opt-in. One-click unsubscribe on every issue. We never share your address.
We use Google Analytics to measure site traffic, which sets cookies. No ads and no cross-site tracking. See our privacy policy.
