Browse public community intelligence reports, source analysis, and threat research.
6 intel reports
An unidentified attacker exploited compromised Qubole AWS credentials to perform cross-account AssumeRole attacks, stealing secrets and S3 data from multiple customer environments.
A new Windows infostealer called VOLTA-AUTODOXER uses LLM APIs to analyze stolen data and rank victims by financial monetization value.
Zeabur is permanently shutting down following an October 2026 breach that exposed 3.2 million secrets and granted attackers root access to customer infrastructure via compromised administrative credentials.
A self-proclaimed bug bounty hunter utilizes LLM-generated JavaScript malware named PhantomRaven to compromise developer environments via typosquatted npm packages for credential theft.
ChainDrop, a descendant of the Shai-Hulud malware family, is a self-propagating npm worm targeting developer workstations and CI/CD pipelines to harvest cloud, registry, and AI tool credentials.
TeamPCP and other actors are leveraging container escapes via host vulnerabilities (CVE-2024-21626) and misconfigured orchestration APIs to compromise Kubernetes secrets and host systems.
