Marcus Thorne

CISA's Cyber Scholarship Program Under Siege: Funding Lapse Jeopardizes National Security Talent Pipeline

CISA cancels summer internships for cyber scholarship students amid DHS funding lapse, exacerbating a critical talent pipeline crisis.

Marcus Thorne General news

Linux Kernel's AI Code Policy: A Cybersecurity Blind Spot for Supply Chain Integrity?

Linux kernel adopts new AI code policy. Cybersecurity researchers analyze its implications, potential vulnerabilities, and the true challenge of generative AI's supply chain risks.

Marcus Thorne General news

Evading Detection: Unpacking the Obfuscated JavaScript Threat from RAR Archives

Deep dive into a low-detection obfuscated JavaScript threat delivered via phishing, analyzing its evasion tactics and defensive strategies.

Marcus Thorne General news

Ransomware Hegemony: Qilin, Akira, Dragonforce Account for 40% of Global Attacks

Three ransomware gangs—Qilin, Akira, Dragonforce—dominated 40% of March's 672 incidents, signaling concentrated cyber threats.

Marcus Thorne General news

Russia's GRU Leverages Router Flaws for Mass Microsoft Office Token Theft: A Deep Dive

Russian military intelligence exploits old router flaws to steal Microsoft Office tokens from 18,000+ networks, bypassing traditional malware detection.

Marcus Thorne General news

Vimeo-Themed Phishing Onslaught: Deconstructing the Campaign Targeting SLTT Personal & Banking Data

Deep dive into a Vimeo-themed phishing campaign targeting U.S. SLTTs, analyzing TTPs, data exfiltration, and advanced defensive strategies.

Marcus Thorne General news

APT28's

APT28 (Forest Blizzard) is exploiting MikroTik/TP-Link SOHO routers in a global DNS hijacking and cyber espionage campaign since May 2024.

Marcus Thorne General news

Beyond Filth: Why Your AirPods Are a Biohazard & A Cyber-Forensic Tool for Pristine Performance

Discover the critical link between earbud hygiene and cybersecurity. Learn to clean your AirPods and utilize advanced telemetry tools for threat intelligence.

Marcus Thorne General news

Project Glasswing: AI's Offensive Countermeasure in the Zero-Day Arms Race

Tech giants launch Project Glasswing, an AI initiative to proactively identify critical software vulnerabilities, securing the digital frontier.

Marcus Thorne General news

Acronis MDR by TRU: Elevating MSP Cyber Resilience with 24/7 Threat Intelligence and Response

Acronis MDR by TRU offers 24/7 managed detection, incident response, and cyber resilience, empowering MSPs with advanced security capabilities.

Marcus Thorne General news

ISC Stormcast 2026: Unmasking Next-Gen Threats – AI-Driven Phishing, Supply Chain Compromises, and OSINT Imperatives

Analyzing 2026's advanced cyber threats: AI phishing, supply chain attacks, zero-days, and critical OSINT strategies for defense.

Marcus Thorne General news

LG G6 vs. Samsung S95H: A Cybersecurity Researcher's Deep Dive into 2026's Premium OLEDs

Unrivaled 2026 OLEDs compared: LG G6 vs. Samsung S95H. A technical analysis of picture, sound, and critical cybersecurity implications.

Marcus Thorne General news

Fortinet Zero-Day Exploits: Urgent Hotfix Advised as Threat Actors Target FortiClient EMS Pre-Patch

Fortinet users face active zero-day exploitation in FortiClient EMS. Apply hotfix immediately; full patch pending.

Marcus Thorne General news

Redirects in Phishing: A 2026 Threat Landscape Analysis for Cybersecurity Researchers

An in-depth technical analysis on the evolving use of redirects in phishing by 2026, focusing on obfuscation, evasion, and advanced forensic techniques.

Marcus Thorne General news

Germany De-Anonymizes 'UNKN': Unmasking the Alleged Mastermind Behind REvil & GandCrab Ransomware

German authorities identify 'UNKN,' Daniil Maksimovich Shchukin, as the alleged head of GandCrab and REvil ransomware operations.

Marcus Thorne General news

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

Learn how SOCs unify visibility, integrate intelligence, and adapt workflows to combat sophisticated multi-OS cyberattacks across Windows, Mac, Linux, and mobile.

Marcus Thorne General news

Residential Proxies: The Digital Camouflage Undermining IP-Based Cybersecurity Defenses

Residential proxies mask malicious traffic as legitimate, rendering traditional IP reputation ineffective. Learn advanced defenses.

Marcus Thorne General news

A Week of Cyber Escalation: Zero-Days, APTs, and Supply Chain Breaches (March 30 – April 5, 2026)

Deep dive into a week of critical cyber threats: zero-days, APT campaigns, ransomware evolution, and supply chain attacks.

Marcus Thorne General news

Real RAM vs. Virtual RAM: My Windows PC Performance & Forensics Deep Dive

Comparative analysis of physical vs. virtual RAM on Windows, revealing performance bottlenecks and critical forensic implications for cybersecurity.

Marcus Thorne General news

Autonomous Weapon Systems: Navigating the Technical and Ethical Abyss of Killer Robots

Deep dive into the technical and ethical challenges of killer robots (LAWS), their consequences, and critical mitigation strategies.

Marcus Thorne General news

TeamPCP Update 006: EU Cloud Breach Confirmed, Sportradar Impact, 1,000+ SaaS Environments Compromised

CERT-EU confirms European Commission cloud breach. Sportradar details emerge. Mandiant quantifies TeamPCP campaign at 1,000+ SaaS environments.

Marcus Thorne General news

UNC1069's Sophisticated Supply Chain Attack: Targeting Node.js Maintainers via Fake LinkedIn & Slack

UNC1069 targets Node.js maintainers with fake social profiles to compromise open-source packages, posing significant supply chain risk.

Marcus Thorne General news

Critical Breaches Unpacked: Axios npm Supply Chain, FortiClient EMS Zero-Days, and the AI Identity Fraud Onslaught

Deep dive into Axios npm supply chain compromise, critical FortiClient EMS exploitation, and the rising threat of AI-driven identity attacks.

Marcus Thorne General news

LeafyPod's Digital Roots: A 2-Month Smart Planter Deployment - Unpacking the OSINT & Cybersecurity Footprint

After two months, a LeafyPod smart planter revealed its true digital footprint. A deep dive into IoT security, data exfiltration, and OSINT implications.

Marcus Thorne General news

CISA Under Siege: Analyzing the Perilous Impact of Proposed Multi-Million Dollar Budget Cuts on US Cyber Resilience

Proposed budget cuts threaten CISA's critical role in safeguarding US critical infrastructure and national cybersecurity.

Marcus Thorne General news

FortiClient EMS Zero-Day (CVE-2026-35616) Actively Exploited: Urgent Hotfixes Available

Critical FortiClient EMS zero-day (CVE-2026-35616) actively exploited. Emergency hotfixes released for versions 7.4.5 and 7.4.6.

Marcus Thorne General news

Elite Brand Job Scams: A Sophisticated Credential Harvesting Operation Targeting Google & Facebook Accounts

Uncovering Coca-Cola & Ferrari job scams designed to steal Google & Facebook credentials, detailing technical attack vectors & defensive strategies.

Marcus Thorne General news

Malware-Laced Claude Code Leak: A Deep Dive into the Escalating Supply Chain Cyber Crisis

Exploiting the Claude AI code leak with bonus malware, FBI wiretap tools hack, and Cisco source code theft signals a critical cyber threat landscape.

Marcus Thorne General news

Venom Unmasked: New Automated Phishing Platform Targets C-Suite for Advanced Credential Theft

Discover Venom, a sophisticated automated phishing platform targeting C-suite executives for credential theft, leveraging advanced evasion techniques.

Marcus Thorne General news

The Privacy Paradox: Why Inconsistent App Labels Undermine Trust and Data Security

Mobile app privacy labels fail to adequately inform users, creating security vulnerabilities and eroding trust in digital data practices.

Marcus Thorne General news

China-Linked TA416 Unleashes Sophisticated PlugX and OAuth Phishing Campaigns Against European Governments

TA416 resurfaces, targeting European governments with advanced PlugX malware and OAuth-based phishing for espionage.

Marcus Thorne General news

Stealthy Exfiltration: 'ChatGPT Ad Blocker' Chrome Extension Unmasked as Covert Spyware

A malicious Chrome extension, 'ChatGPT Ad Blocker,' was caught harvesting user conversations, posing a severe data privacy risk.

Marcus Thorne General news

ZDNET's OSINT Deep Dive: The 5 Most Surprising Amazon Buys (No. 1 is a Cyber-Sleuth's Dream Gadget)

ZDNET readers' surprising Amazon tech buys analyzed through a cybersecurity lens, including a top gadget for digital forensics.

Marcus Thorne General news

House Democrats Expose ICE's Covert Use of Paragon Spyware: A Deep Dive into Surveillance Technology & Oversight Failures

House Democrats decry confirmed ICE usage of sophisticated Paragon spyware, raising critical questions about surveillance, privacy, and accountability.

Marcus Thorne General news

Windows Secure Boot's 2026 Expiration: New Indicators Empower Proactive Enterprise Security

Microsoft introduces new Secure Boot certificate status indicators in Windows Security app to track 2026 expiration and facilitate proactive updates.

Marcus Thorne General news

Apple's Covert Countermeasure: DarkSword Exploit Patches Quietly Extended to iOS 18.7.7

Apple expands critical DarkSword exploit kit patches to iOS 18.7.7, addressing sophisticated zero-day vulnerabilities.

Marcus Thorne General news

Uncanny Valley: Iran's Cyber Escalation, Election Tech Vulnerabilities, and Polymarket's OSINT Lessons

Deep dive into Iran's cyber threats, midterm election security, and Polymarket's operational challenges from an OSINT perspective.

Marcus Thorne General news

Critical Vulnerability Uncovered: Mass Exploitation Attempts Target Exposed Vite Development Servers (CVE-2025-30208)

Urgent alert on CVE-2025-30208, targeting exposed Vite installs. Learn technical details, impacts, and mitigation strategies.

Marcus Thorne General news

Unmasking Storm: The Infostealer Revolutionizing Credential Exfiltration with Server-Side Decryption

Storm infostealer uses server-side decryption, bypassing endpoint security. Learn its technical mechanisms, impact, and advanced defenses.

Marcus Thorne General news

Geopolitics, AI, and Cybersecurity: Navigating the Nexus at RSAC 2026

RSAC 2026 insights reveal AI-driven threats, geopolitical shifts, and advanced cybersecurity strategies shaping our digital future.

Marcus Thorne General news

Exploiting Trust: Unpacking the Sophisticated Token Giveaway Scams Targeting GitHub Developers

GitHub developers are prime targets for sophisticated token giveaway scams. Learn technical vectors, digital forensics, and defense strategies.

Marcus Thorne General news

iOS 18 Users: Critical DarkSword Exploit Patch Demands Immediate Update

Urgent iOS 18 patch protects against the DarkSword exploit, preventing RCE and data exfiltration. Update now!

Marcus Thorne General news

Hasbro Under Siege: A Technical Deep Dive into Cyber Resilience and Post-Incident Forensics

Hasbro confirms cyberattack, initiating extensive recovery. This technical analysis explores incident response, forensic challenges, and supply chain security implications.

Marcus Thorne General news

Autonomous AI Agents: Wikipedia's Bot Rebellion Signals a New Era of Digital Conflict

Wikipedia's AI agent incident heralds a 'bot-ocalypse' of autonomous digital entities, demanding advanced cybersecurity and OSINT defenses.

Marcus Thorne General news

Apple's Unprecedented Backport: iOS 18 Secures Against DarkSword Threat

Apple issues rare backported patches for iOS 18, protecting millions from the sophisticated DarkSword hacking tool without forcing iOS 26 updates.

Marcus Thorne General news

TeamPCP Update 005: First Victim Unmasked, Cloud Exploitation Exposed, Attribution Tightens

TeamPCP Update 005 reveals first confirmed victim, detailed cloud enumeration tactics, and narrowed threat actor attribution by Axios.

Marcus Thorne General news

Cybersecurity Crisis: 80% of UK Manufacturers Compromised Annually, ESET Report Reveals Financial Devastation

80% of UK manufacturers faced cyber incidents, suffering significant financial losses. This article details attack vectors, impacts, and advanced defensive strategies.

Marcus Thorne General news

Axios NPM Compromise: A Deep Dive into Supply Chain Vulnerability and Precision Threat Actor Tactics

Axios NPM package briefly compromised, exposing supply chain risks. Analysis of suspected North Korean threat actor tactics and defensive strategies.

Marcus Thorne General news

Android Developer Verification: A Pivotal Shift Towards Enhanced Ecosystem Security

Google rolls out mandatory developer verification to combat malicious actors, enhancing Android ecosystem security and user trust.

Marcus Thorne General news

Operational Readiness: DeWalt's Foundational Hardware & Advanced Digital Reconnaissance

A cybersecurity researcher's perspective on leveraging robust tools, from DeWalt hardware to advanced OSINT platforms, for operational readiness and threat intelligence.

Marcus Thorne General news

Axios Supply Chain Attack: A Critical Threat to 100 Million Weekly Downloads

Supply chain attack on Axios threatens widespread compromises. Learn about the threat, impact, and advanced mitigation strategies.

Senior Cybersecurity Analyst and Digital Privacy Advocate with over 15 years of experience in network security. Marcus specializes in threat intelligence and data protection strategies.

CISA's Cyber Scholarship Program Under Siege: Funding Lapse Jeopardizes National Security Talent Pipeline

Linux Kernel's AI Code Policy: A Cybersecurity Blind Spot for Supply Chain Integrity?

Evading Detection: Unpacking the Obfuscated JavaScript Threat from RAR Archives

Ransomware Hegemony: Qilin, Akira, Dragonforce Account for 40% of Global Attacks

Russia's GRU Leverages Router Flaws for Mass Microsoft Office Token Theft: A Deep Dive

Vimeo-Themed Phishing Onslaught: Deconstructing the Campaign Targeting SLTT Personal & Banking Data

APT28's

Beyond Filth: Why Your AirPods Are a Biohazard & A Cyber-Forensic Tool for Pristine Performance

Project Glasswing: AI's Offensive Countermeasure in the Zero-Day Arms Race

Acronis MDR by TRU: Elevating MSP Cyber Resilience with 24/7 Threat Intelligence and Response

ISC Stormcast 2026: Unmasking Next-Gen Threats – AI-Driven Phishing, Supply Chain Compromises, and OSINT Imperatives

LG G6 vs. Samsung S95H: A Cybersecurity Researcher's Deep Dive into 2026's Premium OLEDs

Fortinet Zero-Day Exploits: Urgent Hotfix Advised as Threat Actors Target FortiClient EMS Pre-Patch

Redirects in Phishing: A 2026 Threat Landscape Analysis for Cybersecurity Researchers

Germany De-Anonymizes 'UNKN': Unmasking the Alleged Mastermind Behind REvil & GandCrab Ransomware

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

Residential Proxies: The Digital Camouflage Undermining IP-Based Cybersecurity Defenses

A Week of Cyber Escalation: Zero-Days, APTs, and Supply Chain Breaches (March 30 – April 5, 2026)

Real RAM vs. Virtual RAM: My Windows PC Performance & Forensics Deep Dive

Autonomous Weapon Systems: Navigating the Technical and Ethical Abyss of Killer Robots

TeamPCP Update 006: EU Cloud Breach Confirmed, Sportradar Impact, 1,000+ SaaS Environments Compromised

UNC1069's Sophisticated Supply Chain Attack: Targeting Node.js Maintainers via Fake LinkedIn & Slack

Critical Breaches Unpacked: Axios npm Supply Chain, FortiClient EMS Zero-Days, and the AI Identity Fraud Onslaught

LeafyPod's Digital Roots: A 2-Month Smart Planter Deployment - Unpacking the OSINT & Cybersecurity Footprint

CISA Under Siege: Analyzing the Perilous Impact of Proposed Multi-Million Dollar Budget Cuts on US Cyber Resilience

FortiClient EMS Zero-Day (CVE-2026-35616) Actively Exploited: Urgent Hotfixes Available

Elite Brand Job Scams: A Sophisticated Credential Harvesting Operation Targeting Google & Facebook Accounts

Malware-Laced Claude Code Leak: A Deep Dive into the Escalating Supply Chain Cyber Crisis

Venom Unmasked: New Automated Phishing Platform Targets C-Suite for Advanced Credential Theft

The Privacy Paradox: Why Inconsistent App Labels Undermine Trust and Data Security

China-Linked TA416 Unleashes Sophisticated PlugX and OAuth Phishing Campaigns Against European Governments

Stealthy Exfiltration: 'ChatGPT Ad Blocker' Chrome Extension Unmasked as Covert Spyware

ZDNET's OSINT Deep Dive: The 5 Most Surprising Amazon Buys (No. 1 is a Cyber-Sleuth's Dream Gadget)

House Democrats Expose ICE's Covert Use of Paragon Spyware: A Deep Dive into Surveillance Technology & Oversight Failures

Windows Secure Boot's 2026 Expiration: New Indicators Empower Proactive Enterprise Security

Apple's Covert Countermeasure: DarkSword Exploit Patches Quietly Extended to iOS 18.7.7

Uncanny Valley: Iran's Cyber Escalation, Election Tech Vulnerabilities, and Polymarket's OSINT Lessons

Critical Vulnerability Uncovered: Mass Exploitation Attempts Target Exposed Vite Development Servers (CVE-2025-30208)

Unmasking Storm: The Infostealer Revolutionizing Credential Exfiltration with Server-Side Decryption

Geopolitics, AI, and Cybersecurity: Navigating the Nexus at RSAC 2026

Exploiting Trust: Unpacking the Sophisticated Token Giveaway Scams Targeting GitHub Developers

iOS 18 Users: Critical DarkSword Exploit Patch Demands Immediate Update

Hasbro Under Siege: A Technical Deep Dive into Cyber Resilience and Post-Incident Forensics

Autonomous AI Agents: Wikipedia's Bot Rebellion Signals a New Era of Digital Conflict

Apple's Unprecedented Backport: iOS 18 Secures Against DarkSword Threat

TeamPCP Update 005: First Victim Unmasked, Cloud Exploitation Exposed, Attribution Tightens

Cybersecurity Crisis: 80% of UK Manufacturers Compromised Annually, ESET Report Reveals Financial Devastation

Axios NPM Compromise: A Deep Dive into Supply Chain Vulnerability and Precision Threat Actor Tactics

Android Developer Verification: A Pivotal Shift Towards Enhanced Ecosystem Security

Operational Readiness: DeWalt's Foundational Hardware & Advanced Digital Reconnaissance

Axios Supply Chain Attack: A Critical Threat to 100 Million Weekly Downloads