Skip to content
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian… 

Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

Swati KhandelwalNov 04, 2026Vulnerability / Web Security A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app’s server by uploading a crafted file if the app… 

China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign… 

Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure

Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure

Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as Fluffy Wolf, the threat actor has a history of targeting Russian and international…