News

PyPI ‘telnyx’ Backdoored by TeamPCP: Hidden Payloads Inside Audio Files
PyPI package 'telnyx' versions 4.87.1 and 4.87.2 contain malware from threat actor TeamPCP. Malware runs on import, uses WAV steganography for payloads

EXCLUSIVE: China-Linked ‘Red Menshen’ Plants Kernel-Level Sleeper Cells in Global Telecom Networks
Discover how China-linked Red Menshen uses the stealthy, kernel-level BPFDoor backdoor to infiltrate global telecom networks and spy on users

The LiteLLM Supply Chain Attack: A Complete Technical Breakdown of the AI Ecosystem’s Darkest Hour
An in-depth investigative report on the March 2026 LiteLLM supply chain attack. Discover how the Trivy GitHub Actions hack led to a massive PyPI compromise

THE SILENT CASCADE: How TeamPCP Weaponized the Global Security Supply Chain to Steal Half a Million Credentials
Exposing the TeamPCP supply chain attack: Over 500,000 credentials stolen via backdoored LiteLLM and Trivy scanner. Full analysis and timeline

HackerOne Data Breach 2026: Why the Navia Benefit Solutions Hack is a Third-Party Security Nightmare
HackerOne slams Navia Benefit Solutions after a BOLA vulnerability exposed the SSNs and data of 287 employees. Read the full report

Alleged UnitedHealth Group Insider Breach Exposes 500,000+ Florida Client Records
Massive UnitedHealth Group data breach reported in Florida. Threat actor luc1f3rg4ng claims 500,000+ records stolen via insider access, including SSNs and Medicaid info

Alleged OVHcloud Breach: 1.6 Million Customer Records and 5.9 Million Websites At Risk?
According to a popular dark-web forum, allegedly, OVHcloud user data has been breached involving 1.6M customer records and 5.9M websites

The Silicon Siege: Every Cyber Attack of the 2026 Iran War Analyzed
From the Badday Sabar app hijack to the Stryker wiper attack, we analyze every cyber operation in the 2026 Iran War like Handala Hack and more

BREAKING: Crunchyroll Data Breach Exposes 100GB of Customer Data via Indian Outsourcing Partner
Massive Crunchyroll breach reported. 100GB of customer data, including emails & credit cards leaked. Learn how to protect your account now.

The 2026 Android Developer Verification Mandate: A Deep Dive
Explore the massive 2026 shift in Android developer verification. Learn how Google is balancing sideloading freedom with new security mandates





