A threat actor called JINX-0164 is posing as recruiters to trick developers into running malware that steals credentials, crypto wallets, and SSH keys. If your company employs developers, this is your problem.
A single threat actor called JINX-0163 is systematically harvesting credentials across AWS, Azure, GCP, Okta, and SaaS platforms. If you use any cloud service, you're in the blast radius.
They've been hijacking Docker containers, Kubernetes clusters, and cloud credentials since 2019. If you run anything in the cloud -- and you almost certainly do -- TeamTNT is looking for the door you left open.
MuddyWater is a state-sponsored APT run by Iran's intelligence ministry. Their techniques — phishing from compromised accounts, abusing legitimate admin tools — are now standard criminal playbook. Here's what they do and how to defend against it.
The most dangerous hacking group in America doesn't write exploits. They pick up the phone and ask for access. And your team is giving it to them.