Cato Networks tracked Poisson using OpenSSH and Tailscale to maintain access after Havoc C2 outage in a 33-day intrusion.

A new threat actor known as CRYSTALRAY has significantly broadened its targeting scope with new tactics and exploits, now counting over 1,500 victims whose credentials were stolen and cryptominers ...

Velvet Ant Hid Inside Linux Login Stack Arabian Post. clearfix>A China-nexus hacking group maintained covert access to a segregated critical-infrastructure network for nearly a decade by tampering wit ...

A Chinese hacking group is hijacking the SSH daemon on network appliances by injecting malware into the process for persistent access and covert operations. The newly identified attack suite has been ...