Attack Blog- 2026 2025 2024 2023 2021 2020 2019 2018
AI blog APT blog Attack blog BigBrother blog BotNet blog CyberCrime blog Cyber blog Cryptocurrency blog Exploit blog Hacking blog ICS blog Incident blog IoT blog Malware blog OS Blog Phishing blog Ransom blog Safety blog Security blog Social blog Spam blog Vulnerebility blog
DATE | NAME | Info | CATEG. | WEB |
|
17.10.26 |
ARTEX Attacks on South Korean Financial Institutions | From September 27 to early October 2026, the internet-facing (peripheral) business systems of multiple South Korean financial institutions were attacked one after another. | Attack blog | THREATBOOK |
|
13.10.26 |
ARTEX Attacks on South Korean Financial Institutions | From September 27 to early October 2026, the internet-facing (peripheral) business systems of multiple South Korean financial institutions were attacked one after another. | Attack blog | THREATBOOK |
|
10.10.26 |
DDoS Readiness: Is Your Protection Actually On? | Most security controls tell you when they’re broken. A bad firewall rule lets traffic through that shouldn’t be there. An expired certificate generates alerts. A misconfigured WAF starts blocking legitimate users and someone notices pretty quickly. | Attack blog | Imperva |
|
6.10.26 |
New Remote DoS Attacks Against GraphQL Java | Imperva Threat Research identified a series of remote denial‑of‑service vulnerabilities in GraphQL Java, one of the most widely used libraries for GraphQL in the Java ecosystem. | Attack blog | Imperva |
|
6.10.26 |
The Hidden DoS Vector in SQL Parsers | SQL parsers are critical components of the modern data stack. They validate queries before they reach the database, transpile between dialects, and lint codebases for style violations. Increasingly, they also power AI-driven SQL generation in LLM-integrated data tools. | Attack blog | Imperva |
|
18.9.26 |
The New DDoS Playbook: Lessons from Khan Academy, Yottaa, and Magnolia | Attackers have traded prolonged bombardments for short, violent bursts – traffic spikes that hit in 30 to 60 seconds and vanish before a human even gets paged. You can’t manually triage an attack that’s already over before you’ve had a chance to open Slack. | Attack blog | Fastly |
| 27.6.26 | Threat Brief: Mitigating Large-Scale Credential Attacks | Unit 42 is aware of a large-scale password spraying and credential theft campaign (“FortiBleed”) against Fortinet devices. We observed attempts targeting MSSQL devices as well, and have seen reports of Sophos devices also being targeted. | Attack blog | Palo Alto |
| 23.5.26 | GCC Cyber 2026: How Digital Banking Expansion Is Creating a New Attack Surface Attackers Are Already Exploiting | The GCC digital banking attack surface is expanding rapidly, driven by AI threats, ransomware, open banking risks, and rising cyberattacks in 2026. | Attack blog | Cyble |
| 2.5.26 | The npm Threat Landscape: Attack Surface and Mitigations | The security of the npm ecosystem reached a critical inflection point in September 2025. The Shai-Hulud worm, a self-replicating malware that automated the compromise and redistribution of malicious packages, marked the end of the “nuisance” era of npm attacks and the beginning of a high-consequence threat landscape. | Attack blog | Palo Alto |
| 28.3.26 | The Ghost SPN Attack: Catching Stealthy Kerberoasting Before It's Too Late Using Trellix NDR | This study breaks down the 'Ghost SPN' vector, which uses delegated administrative permissions to create temporary exposure windows. | Attack blog | Trelix |
| 21.3.26 | Getting Roasted? Trellix Helix sees through AS-REP Attack | This blog demonstrates how Trellix Helix's Advanced Correlation Engine (ACE) identifies AS-REP Roasting attacks based on behavioral patterns and technique fingerprints rather than tool-specific indicators. | Attack blog | Trelix |
| 24.1.26 | DNS OverDoS: Are Private Endpoints Too Private? | We discovered an aspect of Azure’s Private Endpoint architecture that could expose Azure resources to denial of service (DoS) attacks. In this article, we explore how both intentional and inadvertent acts could result in limited access to Azure resources through the Azure Private Link mechanism. We uncovered this issue while investigating irregular behavior in Azure test environments. | Attack blog | Palo Alto |