Cloudflare Tunnel Abused for Persistence in N-central Attacks
Threat actors exploited CVE-2026-18577 in N-central to register a new service for a Cloudflare Tunnel, enabling persistent access to managed systems even…
Category: Cyber Companies
Cybersecurity companies, vendors and market players.
Python Software Foundation’s Black Tool Compromised by Cordyceps
The Python Software Foundation's Black tool was affected by the Cordyceps flaw, allowing a single pull request to execute attacker code and…
Microsoft — Cybersecurity company profile
Microsoft was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Mitsui Bussan Secure Directions: Japanese Cybersecurity Firm Tracking Amadey Activity
Mitsui Bussan Secure Directions is a Japanese cybersecurity company that published data on the daily number of active Amadey C2 servers, showing…
CyberArk: Identity Security Company Disclosing StealC Vulnerabilities
CyberArk is an identity security company that disclosed a cross-site scripting vulnerability in the StealC web-based control panel, providing insights into the…
IBM — Cybersecurity company profile
IBM was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Proofpoint: Enterprise Security Company
A cybersecurity company that identified and attributed the OWAReaper campaign to Laundry Bear, providing detailed analysis of the threat actor's tactics and…
Bitdefender Warns of Powercat Stealer via Fake Xeno Cheats
Bitdefender researchers detailed a campaign distributing the Powercat Java-based stealer through fake Xeno Executor cheats. The malware steals sensitive data and provides…
Bitsight: Cybersecurity Firm Uncovers Fuyao Operation
Bitsight is a cybersecurity company that discovered the Fuyao ad fraud and proxy abuse operation. Their research involved sinkholing a domain and…
ESET: Cybersecurity Company
ESET is a cybersecurity company that originally exposed the Operation RoundPress campaign in May 2025.