Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cato CTRL Threat Actor Profile: ShinyHunters - The Brand That Outlasts the Takedowns

Despite three forum seizures, five administrator arrests across three operations, and the conviction of its founder, ShinyHunters remains active. The real story of ShinyHunters in 2026 is not just persistence, but the evolution of a cybercrime brand that adapts faster than defenders and law enforcement can respond. The 2025–2026 tactics make this persistence especially dangerous. Organizations using Salesforce, Salesloft Drift, Gainsight, or similar third-party SaaS integrations are at risk.

Best AI Agent Development Companies for Cybersecurity in 2026

Cybersecurity teams continue to face challenges and all sorts of pressure. The volume of cyberattacks is increasing, while they have limited resources to investigate alerts, monitor systems, and respond to incidents. AI agents are receiving a great deal of interest due to their ability to automate repetitive security tasks, speed up threat identification, and support incident response 24/7.

Top 7 AI Workspace Security Solutions for Remote Teams in 2026

Remote work has permanently changed how organizations operate. Teams collaborate across time zones, connect through SaaS platforms, and rely on cloud-based workflows to maintain productivity. At the same time, artificial intelligence has become embedded throughout modern work environments. Employees use AI copilots to draft content, summarize meetings, write code, analyze data, and automate repetitive tasks.

How London anti-phishing specialists can help protect your business

Phishing remains one of the most common ways criminals gain access to business systems. A convincing email, fake Microsoft 365 login page or urgent payment request can expose credentials, redirect money or introduce malware into your network. Working with an anti-phishing company in London gives you access to practical controls, employee training and ongoing monitoring designed around the way your organisation operates. The aim is to reduce the chance of a successful attack and ensure suspicious activity is identified quickly.
Featured Post

The AI Data Centre Buildout Has a Security Problem

In recent months, there has been plenty of speculation about whether the industry is in the middle of an "AI bubble," often fuelled by questions about whether massive infrastructure investments are matched by real demand. Yet current developments suggest this is not the case: the ecosystem around AI continues to expand at a pace that indicates longterm structural change rather than shortterm hype.

The 10 Best User & Entity Behavior Analytics (UEBA) Tools

User and entity behavior analytics (UEBA) tools are essential cybersecurity solutions, helping organizations to detect anomalous activities and hidden threats. In this article, we explore the top 10 UEBA tools on the market today. You’ll learn about their key features, use cases, pricing, and customer experiences.

Over 140 popular Mastra npm Packages Hit by Supply Chain Attack

On June 17th we detected a large-scale supply chain attack targeting the entire @mastra npm scope, a popular open-source AI agent framework. An attacker republished 141 packages in a burst between 01:15 and 02:00 UTC, silently injecting a malicious dependency into every one of them. The affected packages include @mastra/core, which has 918K weekly npm downloads, as well as mastra and create-mastra.

VMware ESXi Networking Concepts

For connecting physical servers and computers to a network, you need physical network adapters, switches, and routers. With virtual machines, virtual network concepts are used for communication between the different components of an infrastructure. The proper configuration of ESXi networking on a host is critically important to the configuration of any ESXi environment. Generally, ESXi host networks include storage, vMotion, VM, and management networks.

The Deep Dive: Kroll's Analysis of the GARUDA C2 Malware

Kroll identified a cross-platform malware framework, dubbed GARUDA C2, that uses public code-hosting platforms like GitHub for staging, redundancy and command distribution across Windows, macOS and Linux. Analysis links the campaign to an India-based operator supported by Hindi-language development artifacts, build logs, infrastructure indicators and evidence suggesting use of a locally hosted large language model (LLM) to accelerate malware development.

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper

An attacker republished more than 140 packages in the @mastra npm scope, each carrying a single malicious dependency, easy-day-js. The malicious versions were observed on 2026-06-17. easy-day-js is a typosquat of the dayjs date library: version 1.11.21 is the clean prior release with no install hook, while version 1.11.22 adds an obfuscated postinstall dropper.