Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 5 results
criticalbug_reportVulnerabilitybug_reportVulnerability
Fake LastPass installer uses Microsoft-signed driver to kill EDR and steal passwords
Windows systems where users downloaded a fake LastPass Authenticator installer from a malicious GitHub repository (github.com/LastPass-Authenticator). The attack uses a Microsoft-signed kernel driver (Alinubx.sys, renamed CcProtect.sys from CnCrypt d…
LastPass21 Sep · 15:31 UTC
highbug_reportVulnerabilitybug_reportVulnerability
Fake GitHub repos impersonate LastPass to deliver Rapuncel infostealer
Users searching for LastPass Authenticator and other popular software via search engines. Threat actors leverage SEO-poisoned fake GitHub repositories to distribute Rapuncel infostealer malware.
LastPass18 Sep · 13:19 UTC
highbug_reportVulnerabilitybug_reportVulnerability
LastPass breached via Klue supply chain attack; OAuth tokens stolen
LastPass customers. Attack vector: compromised Klue third-party service leading to OAuth token theft and unauthorized access to LastPass Salesforce environment containing customer data.
LastPass23 Jun · 11:58 UTC