Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 4 results
highperson_alertThreat ActorSandworm and UAC-0099 Deploy Mesh Network Backdoor in Ukraine Wiper Attack
Sandworm is a Russian state-sponsored APT group known for destructive cyber operations, particularly against Ukrainian critical infrastructure. In this operation, Sandworm collaborated with UAC-0099 (aka Earth Sirrush), another Russia-aligned threat…
highbug_reportVulnerabilityAndroid spyware Corp MDM targets logistics firms via fake Google Play
Android devices in the logistics sector, specifically targeting CEVA Logistics and TKW Logistics employees. Malicious APK distributed via fake Google Play pages at playgoogle.logisticstkwcargo[.]com and playgoogle.ceva-app[.]help.
highbug_reportVulnerabilityTrezor shipping partner breach exposes 81,000 customer records via Metabase
Trezor cryptocurrency hardware wallet customers who placed orders through ShipMonk logistics provider between November 2019 and August 2026. Total of 81,000 customers affected (67,000 U.S.
highpublicGeopoliticalCEVA Logistics breach exposes European Steam customers' shipping data
This incident exemplifies the systemic risk posed by third-party logistics providers in global supply chains. CEVA Logistics, a subsidiary of CMA CGM Group (the world's third-largest shipping company), operates critical infrastructure spanning 1,000…