CyberHawk Threat Intel

CyberHawk is best Cybersecurity consultancy to provide cybersecurity assessments and security controls.

[CyberHawk Threat Intel @cyberhawkintel]

🚨 Fake CCleaner installs GhostDesk Chrome spywar…

CyberHawk Threat Intel

#cyberhawkthreatintel #cyberhawkk #cyberhawkconsultancy #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[Guillermo Casaus @_guillecasaus]

🚨 Acaban de liberar una de las mayores bases de datos de malware en GitHub.

Se llama Malware Research Hub y contiene miles de muestras recopiladas durante más de 50 años para que investigadores y profesionales de ciberseguridad puedan analizarlas en entornos controlados.

Esto es lo que incluye:

→ 2.699 muestras de malware de diferentes épocas
→ Especímenes de familias como Stuxnet y LockBit
→ Un catálogo forense con 80 familias documentadas
→ Herramientas para investigadores y analistas de seguridad
→ Muestras aisladas y cifradas para reducir el riesgo de ejecución accidental

Lo más importante:

No estamos hablando de simulaciones ni ejemplos creados para un curso.

El repositorio contiene malware real y debe tratarse únicamente en laboratorios aislados y siguiendo estrictamente sus reglas de contención.

Es un recurso orientado al análisis, investigación y formación práctica en ciberseguridad.

Repo 👇

[urlscan.io @urlscanio]

urlscan Pro University is officially LIVE!

Master urlscan search through hands-on challenges - from basic to advanced

Discover typosquat detection, threat verdicts, and phish hunting.

Solve challenges, submit flags, track your progress.

https://t.co/QXV9KYMxD1

[Check Point Research @_CPResearch_]

0-Day Used by Lazarus in #DreamJob Campaign Against Defense Sector:

💥LPE vulnerability in Microsoft’s Afd.sys driver (CVE-2026-68820)
🧰New tools, including #Troy backdoor
🌍Compromised Roundcube servers (CVE-2025-49113) as infrastructure

Read More :
https://t.co/GDI2Ze7CRH

[ANY.RUN @anyrun_app]

🔥 We “hired” Lazarus APT remote workers — and uncovered their toolkit.

@BirminghamCyber & @north_scan used #ANYRUN Sandbox to capture weeks of Famous Chollima activity inside a fake startup.

👀 How not to let a spy in? See full story and videos: https://t.co/IOUZmZEjJQ

[INFINITE NIGHTMARE @MSNightmare2000]

Microsoft has failed to properly patch RoguePlanet (CVE-2026-50656), ShieldBreak, a PoC that demonstrates a full bypass to the previous patch is now public.
https://t.co/YFfn559z6o
The PoC works with the latest August 2026 patch

[The DFIR Report @TheDFIRReport]

🛠️ Tool Tuesday: SoftPerfect NetScan

A legitimate network scanner, and a threat-actor favorite. Across our cases, actors use NetScan to map hosts, shares, and open ports right before lateral movement, sometimes launching RDP straight from its interface.

🔎 Hunt tip: alert on netscan.exe spawning mstsc.exe, and on scanner activity from non-IT hosts.

See it across real intrusions 👉 https://t.co/Dvyc8uB8TE

[CyberHawk Threat Intel @cyberhawkintel]

🚨 Microsoft Plugs Nearly 400 Security Holes

Mic…

CyberHawk Threat Intel

#cyberhawkthreatintel #cyberhawkk #cyberhawkconsultancy #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🔐 How attackers gain access to victim machine

C…

CyberHawk Threat Intel

#cyberhawkthreatintel #cyberhawkk #cyberhawkconsultancy #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🚨 Landing Zone Accelerator Independent Assessmen…

CyberHawk Threat Intel

#cyberhawkthreatintel #cyberhawkk #cyberhawkconsultancy #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🔐 How attackers gain access to victim machine(1)…

CyberHawk Threat Intel

#cyberhawkthreatintel #cyberhawkk #cyberhawkconsultancy #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft Threat Intelligence tracks DeadLock ransomware as an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications, negotiations, and data leak operations. https://t.co/ON4JqUlygl

DeadLock's recovery ecosystem combines a messaging network with blockchain-backed services that store and deliver resources used throughout the extortion process, allowing DeadLock operators to recover from some disruption efforts while maintaining continuity for victims. As defenders, law enforcement, and industry partners increase pressure on cybercriminal ecosystems, threat actors are being forced to adapt their operations and invest in new ways to maintain resilience.

The ransomware employs double extortion tactics and has impacted organizations across multiple sectors and global regions. Get detections, mitigation guidance, and deeper insights into DeadLock's infrastructure, recovery ecosystem, and encryptor design from this Microsoft Threat Intelligence blog post.

[ANY.RUN @anyrun_app]

🎯 We added and updated 25 Suricata rules based on real attacker behavior observed in the wild. Explore the examples and strengthen your detection.

#ANYRUNSuricataChangelog 08/03 – 08/09/2026
Here are 10 examples 👇
89004209 | PHISHING [https://t.co/5F3kh2e7mb] Security awareness platform related URL (/c?c=).
Example analysis session: https://t.co/FVMVOW93Hx

89004210 | PHISHING [https://t.co/5F3kh2e7mb] Mirage2FA related URL pattern observed (/verify.html?).
Example analysis session: https://t.co/D9ILdcv1oN

89004211 | PHISHING [https://t.co/5F3kh2e7mb] PHISHING [https://t.co/5F3kh2e7mb] Mirage2FA related URL pattern observed (/cverify.php).
Example analysis session: https://t.co/D9ILdcv1oN

89004214 | PHISHING [https://t.co/5F3kh2e7mb] GoPhish X-Server header in HTTP response observed.
Example analysis session: https://t.co/zptF5gmDZ8

89004215 | PHISHING [https://t.co/5F3kh2e7mb] Phishing to Malware HTTP activity observed (docx).
Example analysis session: https://t.co/O7HUfIQbYJ

89004217 | MINER [https://t.co/5F3kh2e7mb] Linux executable download URL observed (/nuts/poop).
Example analysis session: https://t.co/v6bpeOA4XL

84004196 | PHISHING [https://t.co/5F3kh2e7mb] FlowerStorm HTTP activity observed (do=).
Example analysis session: https://t.co/fo6udYxW8u

84004308 | PHISHING [https://t.co/5F3kh2e7mb] FlowerStorm HTTP activity observed (key=).
Example analysis session: https://t.co/fo6udYxW8u

84004310 | PHISHING [https://t.co/5F3kh2e7mb] DocuSign-themed phishing campaign related URL (/docuslgn).
Example analysis session: https://t.co/y7uaOK7X0x

84004322 | PHISHING [https://t.co/5F3kh2e7mb] Phishing TDS HTTP activity observed (analytics=).
Example analysis session: https://t.co/nUNIZbQdYh

Explore the complete ruleset: https://t.co/seLND4nCKa

[CyberHawk Threat Intel @cyberhawkintel]

🔐 Clickfix Explained

Watch this cybersecurity breakdown — straight from the Cyber…

CyberHawk Threat Intel

#cyberhawkthreatintel #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🚨 PSA: Supply Chain Compromise in BdThemes Ecosystem via Poisoned API Response

Th…

CyberHawk Threat Intel

#cyberhawkthreatintel #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🚨 SALT TYPHOON — China's Most Devastating Cyberattack on US Soil

Chinese state ha…

CyberHawk Threat Intel

#cyberhawkthreatintel #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🚨 THREAT ALERT

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Dat…

CyberHawk Threat Intel

#cyberhawkthreatintel #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🚨 CRYPTO BREACH — AR TOKEN SMART CONTRACT EXPLOIT

Attackers used a flash loan to…

CyberHawk Threat Intel

#cyberhawkthreatintel #cybersecurity #threatintel #infosec #ethicalhacking #pentesting #redteam #malwareanalysis #cloudsecurity #offensivesecurity #cybersec #hacking

[CyberHawk Threat Intel @cyberhawkintel]

🛡️ The Average Breach Goes Undetected for 207 Days

That's 207 days of data loss, lateral movement, and damage — before you even know about it. Proactive threat hunting changes that…

CyberHawk Threat Intel · https://t.co/MLTkJOzvgR

#cyberhawkthreatintel #cybersecurity #infosec