Debian apt security update: man-in-the-middle arbitrary code execution

Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Name

Part 2: The Fight Over the Name After Rey (Read Part 1 here) By Jon DiMaggio, Cybersecurity Researcher The September arrests should have been the end of ShinyHunters. Instead, threat actors saw what happens to whoever wears the crown, and rather than rebrand or distance themselves from the title, they began to fight with one […] The post Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Name appe…

I got banned from Lobsters for writing like an LLM

China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP). The campaign, observed starting July 1, 2026, is assessed to have targeted organizations and

KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft

The KeyHunter Operation pairs LLM key theft with an academic fraud campaign that reaches Harvard alumni data, Stanford applications and 18 other universities. SOCRadar’s Threat Research Unit (STRU) attributes the operation to leepsmarts, a Chinese-speaking threat actor, with activity confirmed as late as October 13, 2026. The operation runs on two main tracks: theft of […]