APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

Debian apt security update (man-in-the-middle)

Russian hackers target iOS and Android users with n-day exploits

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering holes target mobile devices with n-day exploits (Source: Sekoia) The company’s Threat Detection & Research (TDR) team spotted the operation in mid-October 202…

The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

Introduction to BOD 26-04On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the regulatory language and it reads like a single operational fact: for a vulnerability that is actively exploited, publicly reachable, and grants an attacker full control, you now have three calendar days to remediate it — and you must run a forensic investigation in…

Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Name

Part 2: The Fight Over the Name After Rey (Read Part 1 here) By Jon DiMaggio, Cybersecurity Researcher The September arrests should have been the end of ShinyHunters. Instead, threat actors saw what happens to whoever wears the crown, and rather than rebrand or distance themselves from the title, they began to fight with one […] The post Aftermath of the September ShinyHunters Arrests: Battle Over the Brand Name appe…