Threats · 6d ago
Bitget Says $351.6 Million Lost in Suspected North Korean Hack
Cryptocurrency exchange Bitget announced today that hackers have siphoned roughly $351.6 million from its hot and warm…
D
Deepak Chandra Meena
Deepak covers the dark web and underground hacking forums, reporting on marketplace activity and access broker listings. Monitors Tor-based forums and encrypted leak channels.
248 stories filedFiled by Deepak Chandra Meena
CVE & Exploits · 6d ago
AI‑Powered ‘Salesbleed’ Attack Uses Salesforce Agents to Funnel Phishing Content Into Slack
Security researchers have identified a new attack chain, dubbed “Salesbleed,” that exploits the artificial‑intelligence…
Darkweb · 6d ago
SectopRAT Reemerges, Embedded Within Trusted Software, Prompting Calls for Behavioral Monitoring
Security researchers have identified a fresh wave of activity from the SectopRAT remote access Trojan, this time…
CVE & Exploits · 6d ago
AI Accelerates Discovery of MikroTrick Exploit Chain in MikroTik RouterOS
Security researchers have identified a novel attack vector, dubbed MikroTrick, that strings together two separate flaws…
Darkweb · 6d ago
Security researchers uncover data leak in Microsoft password‑reset page
Security firm LevelBlue has identified a flaw in Microsoft’s password‑reset portal that allows unauthenticated users to…
Threats · Sep 24, 2026
Forgotten Gadgets Threaten Networks, New Study Highlights Visibility Gap
Enterprises are increasingly confronting a hidden layer of vulnerability: networked devices that have been deployed,…
Phishing · Sep 24, 2026
AvisLoader Malware Exploits ClickFix Lure and Tox Network for Stealthy Command‑and‑Control
Varonis Threat Labs has identified a new Windows-based malware loader, dubbed AvisLoader, that leverages the Tox…
Threats · Sep 24, 2026
TeamFiltration Exploits Default Passwords to Breach Thousands of Microsoft 365 Accounts in Chile
Security researchers have uncovered an active intrusion campaign that leveraged the open‑source TeamFiltration…
Ransomware · Sep 24, 2026
Emerging Galago Ransomware Tied to Panzer Group Signals Growing Double‑Extortion Threat
A previously unknown ransomware campaign, dubbed Galago by security researchers, has surfaced with clear operational…
Threats · Sep 24, 2026
Placeholder Domain ‘third-party.com’ Hijacked to Deliver Fake Cloudflare Checks and PowerShell Payloads
Security researchers have uncovered that the generic domain "third-party.com," frequently employed as a placeholder in…
Threats · Sep 24, 2026
Security Flaw in GitLab’s Auto-Generated Email Addresses Exposes Privileged Tokens
Security researchers have highlighted a vulnerability in GitLab’s inbound email system that could allow attackers to…
CVE & Exploits · Sep 24, 2026
Federal Agencies Lag Behind on CISA Cloud Security Mandate, Report Finds
A new watchdog report released Wednesday reveals that almost nine out of ten civilian executive‑branch agencies missed…