North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel deployments.
A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Master WS-Federation for enterprise SSO. Learn how Passive Requestor Profiles bridge legacy ASP.NET, SharePoint, and ADFS ...
OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...
Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users ...
While some of the campaigns have been found to leverage the technique to deliver malware, others send users to pages hosted on phishing frameworks such as EvilProxy, which act as an ...
IntroductionIn January 2026, Zscaler ThreatLabz observed activity by a suspected Iran-nexus threat actor targeting government officials in Iraq. ThreatLabz discovered previously undocumented malware ...
Abstract: Change detection plays a vital role in numerous real-world domains, aiming to accurately identify regions that have changed between two temporally distinct images. Capturing the complex ...
Abstract: Remote sensing image change detection (RSICD) is a crucial technique for Earth observation. However, the mainstream RSICD methods still face two main challenges. First, the encoding stage ...