Badger Signal

Latest Articles

Breaking AlertsJul 16, 2026

npm 12 Boosts Supply Chain Security; Deprecates 2FA-Bypass GATs

GitHub npm v12 boosts supply chain security by disabling install scripts. They're also deprecating GATs that bypassed 2FA, closing a critical loophole. These updates enhance platfo

Breaking AlertsJul 16, 2026

Microsoft Uncovers GigaWiper: Modular Data Destruction Threat

Microsoft identified GigaWiper, a modular Windows backdoor with three destructive capabilities: full disk wipe, drive overwrite, or ransomware simulation. It causes irreversible da

Breaking AlertsJul 16, 2026

GitHub Orgs Targeted: API Enumeration Campaigns Active

Datadog identified campaigns enumerating corporate GitHub orgs, repos, and users. Attackers use scraping, ghost accounts, and compromised tokens as reconnaissance for deeper attack

Breaking AlertsJul 16, 2026

Former Ransomware Negotiator Jailed for BlackCat Extortion

Former ransomware negotiator Martino was sentenced to 70 months for conspiring with BlackCat (ALPHV). He facilitated extortion and targeted victims, a severe breach of trust.

Breaking AlertsJul 16, 2026

Ill Bloom Flaw: Crypto Wallets Vulnerable to Weak Randomness

Ill Bloom," a critical crypto wallet flaw, exploits weak randomness in recovery phrase generation. Actively exploited, it grants attackers full control over affected wallets.

Breaking AlertsJul 16, 2026

O-UNC-066 Leverages Vishing to Hijack Entra Passkeys for Extortion

O-UNC-066 is employing sophisticated vishing to trick Microsoft 365 users into enrolling new Entra ID passkeys. This campaign exploits advanced authentication methods, utilizing a

Breaking AlertsJul 16, 2026

Free VPNs Fail Basic Security, Exposing Billions of Users

Many popular free VPN apps on Google Play fail to secure user data. They leak traffic, exposing millions and defeating their privacy purpose.

Breaking AlertsJul 16, 2026

Cybercrime OpSec Fail Exposes Hacking Tools, 1.4M Targets

A cybercrime group exposed its server for weeks, leaking hacking tools, logs, and a list of 1.4 million target websites. This critical OpSec failure offers invaluable threat intell

Breaking AlertsJul 16, 2026

Critical XRING Flaw Exposes XQUIC Servers to Remote DoS

A new zero-day, "XRING," impacts Alibaba's XQUIC library, enabling remote DoS via unauthenticated QPACK traffic. No patch is available, leaving systems exposed to immediate risk.

Breaking AlertsJul 16, 2026

Silver Fox Deploys MODBEACON Rust RAT via SEO Poisoning

China's Silver Fox group uses MODBEACON, a Rust RAT, via SEO poisoning. Don't underestimate their deceptive, high-impact tactics.

Breaking AlertsJul 16, 2026

OpenClaw AI Flaws: RCE, Credential Theft Patched

Critical RCE and privilege escalation flaws were discovered in OpenClaw AI, risking credential theft. Prompt patching is crucial for these high-severity vulnerabilities.

Breaking AlertsJul 16, 2026

Tangem Wallet Vulnerability: Laser Attack Resets Passwords

Tangem crypto wallets have a critical physical vulnerability. Attackers with physical access can use a laser pulse to reset the password, bypassing security. This leads to total fu

Newsletter Signup

Get the latest cyber security news and threat intelligence delivered to your inbox.

Latest Articles

npm 12 Boosts Supply Chain Security; Deprecates 2FA-Bypass GATs

Microsoft Uncovers GigaWiper: Modular Data Destruction Threat

GitHub Orgs Targeted: API Enumeration Campaigns Active

Former Ransomware Negotiator Jailed for BlackCat Extortion

Ill Bloom Flaw: Crypto Wallets Vulnerable to Weak Randomness

O-UNC-066 Leverages Vishing to Hijack Entra Passkeys for Extortion

Free VPNs Fail Basic Security, Exposing Billions of Users

Cybercrime OpSec Fail Exposes Hacking Tools, 1.4M Targets

Critical XRING Flaw Exposes XQUIC Servers to Remote DoS

Silver Fox Deploys MODBEACON Rust RAT via SEO Poisoning

OpenClaw AI Flaws: RCE, Credential Theft Patched

Tangem Wallet Vulnerability: Laser Attack Resets Passwords

Newsletter Signup

Latest Ransomware Activity