Daily Archives: Nov 2, 2026

Ethan Mercer

North Korean Hackers Steal Developers’ Credentials to Inject Malware into GitHub...

A hacking group aligned with North Korea has shifted from using fake job interviews to directly stealing developer credentials so it can inject malware into trusted software projects. Tracked as DeceptiveDevelopment, the group used compromised accounts to alter code in public and private repositories between April...
Ethan Mercer

APT Groups Deploy NetamLoader to Target Windows 10 Systems in Asian...

A newly observed malware framework named NetamLoader is being deployed against a customized build of Windows 10 used only by certain government agencies in Asia. The operation appears to be a supply-chain style campaign, and researchers have not yet attributed it to any known threat actor. ...
Ethan Mercer

Aur0ra ransomware gang used Cursor AI agents to gain domain-admin access...

Ransomware operators are increasingly outsourcing the hardest parts of network intrusions to AI coding agents. Sophos researchers found a group linked to the Aur0ra (Aurora) ransomware family using Cursor AI agents to escalate from stolen credentials to domain administrator — the highest level of control on a...