The Wire

CRITICALHackers Exploit Critical WSO2 API Manager JWT Flaw Using Forged Admin Tokens CRITICALKREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens FILEDIran-Linked Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists CRITICALNintendo Switch Vulnerability Lets Nearby Attackers Run Unauthorized Code via QR Code Feature FILEDUK Government Begins Moving 23 Million Users Away From Passwords With Passkeys CRITICALChina-Linked Hackers Chain Chrome and Windows Zero-Days to Deploy GRIMWEDGE Backdoor FILEDTelegram Desktop Flaw Lets Hidden JavaScript Steal Messages From HTML Chat Exports FILEDMalicious Twitch Extension Exposes OAuth Tokens of More Than 30,000 Users CRITICALHackers Exploit Critical WSO2 API Manager JWT Flaw Using Forged Admin Tokens CRITICALKREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens FILEDIran-Linked Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists CRITICALNintendo Switch Vulnerability Lets Nearby Attackers Run Unauthorized Code via QR Code Feature FILEDUK Government Begins Moving 23 Million Users Away From Passwords With Passkeys CRITICALChina-Linked Hackers Chain Chrome and Windows Zero-Days to Deploy GRIMWEDGE Backdoor FILEDTelegram Desktop Flaw Lets Hidden JavaScript Steal Messages From HTML Chat Exports FILEDMalicious Twitch Extension Exposes OAuth Tokens of More Than 30,000 Users

Tag

Threat Intelligenc

Every report filed under this tag.

high Threat Intel

Nimbus Manticore Expands Arsenal With TWOSTROKE-Like Backdoor and SSH Tunneler

The threat actor Nimbus Manticore has expanded its attack toolkit with a new backdoor resembling TWOSTROKE, along with an SSH tunneling utility designed to facilitate covert access and maintain communication with compromised environments.

Zentrya One Desk 08 Sept 2026 3 min read

The Daily Brief

Stay informed. Stay prepared. Stay one step ahead.

One brief each morning: the advisories that matter, the noise removed.

Double opt-in. One-click unsubscribe in every email. We never sell addresses.