The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations.

The “Loop” feature in Cloud Code automates short-term, recurring tasks for up to three days, combining cron job precision with natural language commands for ease of use. It supports custom intervals, ...

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...