Blog | Atarus Offensive Security

top of page

Home
About
Services
Research
AI Pen Tests

REQUEST CONSULTATION

All Posts

OX Security Just Published a Critical Vulnerability in Anthropic's Model Context Protocol. It Affects 150 Million Downloads and 200,000 Vulnerable Servers.

OX Security Just Published a Critical Vulnerability in Anthropic's Model Context Protocol. It Affects 150 Million Downloads and 200,000 Vulnerable Servers.

OX Security Just Published a Critical Vulnerability in Anthropic's Model Context Protocol. It Affects 150 Million Downloads and 200,000 Vulnerable Servers.

Atarus Security Team

Apr 210 min read

A User Got Compromised by a Cryptominer and Credential Harvesters. They Asked OpenAI Codex for Help. Codex Told Them to Throttle the CPU to Quiet the Fan Noise. The Malware Kept Exfiltrating.

A User Got Compromised by a Cryptominer and Credential Harvesters. They Asked OpenAI Codex for Help. Codex Told Them to Throttle the CPU to Quiet the Fan Noise. The Malware Kept Exfiltrating.

A User Got Compromised by a Cryptominer and Credential Harvesters. They Asked OpenAI Codex for Help. Codex Told Them to Throttle the CPU to Quiet the Fan Noise. The Malware Kept Exfiltrating.

Atarus Security Team

Apr 200 min read

Stuxnet Used to Be the Exclusive Weapon of Nation-States. Darktrace Just Published a Malware Sample Built to Sabotage Israeli Water Treatment Plants by Adjusting Chlorine Levels and Pressure Controls.

Stuxnet Used to Be the Exclusive Weapon of Nation-States. Darktrace Just Published a Malware Sample Built to Sabotage Israeli Water Treatment Plants by Adjusting Chlorine Levels and Pressure Controls.

Stuxnet Used to Be the Exclusive Weapon of Nation-States. Darktrace Just Published a Malware Sample Built to Sabotage Israeli Water Treatment Plants by Adjusting Chlorine Levels and Pressure Controls.

Atarus Security Team

Apr 190 min read

NIST Just Admitted It Cannot Keep Up With Vulnerability Submissions. CVE Volume Is Up 263% Since 2020.

NIST Just Admitted It Cannot Keep Up With Vulnerability Submissions. CVE Volume Is Up 263% Since 2020.

NIST Just Admitted It Cannot Keep Up With Vulnerability Submissions. CVE Volume Is Up 263% Since 2020.

Atarus Security Team

Apr 170 min read

Sweden Just Disclosed That Russia Tried to Destroy a Thermal Power Plant. Poland, Norway, Denmark, and Latvia Are Reporting the Same Pattern. Pro-Kremlin Hackers Are No Longer Just Doing DDoS.

Sweden Just Disclosed That Russia Tried to Destroy a Thermal Power Plant. Poland, Norway, Denmark, and Latvia Are Reporting the Same Pattern. Pro-Kremlin Hackers Are No Longer Just Doing DDoS.

Sweden Just Disclosed That Russia Tried to Destroy a Thermal Power Plant. Poland, Norway, Denmark, and Latvia Are Reporting the Same Pattern. Pro-Kremlin Hackers Are No Longer Just Doing DDoS.

Atarus Security Team

Apr 160 min read

Last Night We Wrote That AI Would Overwhelm the Patch Pipeline. This Morning Microsoft Dropped Its Second-Largest Patch Tuesday Ever. 167 Vulnerabilities. Two Zero-Days.

Last Night We Wrote That AI Would Overwhelm the Patch Pipeline. This Morning Microsoft Dropped Its Second-Largest Patch Tuesday Ever. 167 Vulnerabilities. Two Zero-Days.

Last Night We Wrote That AI Would Overwhelm the Patch Pipeline. This Morning Microsoft Dropped Its Second-Largest Patch Tuesday Ever. 167 Vulnerabilities. Two Zero-Days.

Atarus Security Team

Apr 150 min read

Anthropic Built an AI That Autonomously Found Zero-Day Vulnerabilities in Every Major Operating System and Every Major Browser. Then They Refused to Release It.

Anthropic Built an AI That Autonomously Found Zero-Day Vulnerabilities in Every Major Operating System and Every Major Browser. Then They Refused to Release It.

Anthropic Built an AI That Autonomously Found Zero-Day Vulnerabilities in Every Major Operating System and Every Major Browser. Then They Refused to Release It.

Atarus Security Team

Apr 140 min read

The Deadline Passed. ShinyHunters Followed Through. 78 Million Records From Rockstar Games Are Now on the Dark Web. The Full Dataset Is Priced at $200,000. We Tracked This Supply Chain From Day One.

The Deadline Passed. ShinyHunters Followed Through. 78 Million Records From Rockstar Games Are Now on the Dark Web. The Full Dataset Is Priced at $200,000. We Tracked This Supply Chain From Day One.

The Deadline Passed. ShinyHunters Followed Through. 78 Million Records From Rockstar Games Are Now on the Dark Web. The Full Dataset Is Priced at $200,000. We Tracked This Supply Chain From Day One.

Atarus Security Team

Apr 140 min read

Rockstar Games Just Confirmed It Was Breached. ShinyHunters Used the Exact Anodot Supply Chain Attack We Covered Four Days Ago. The Ransom Deadline Is Tomorrow.

Rockstar Games Just Confirmed It Was Breached. ShinyHunters Used the Exact Anodot Supply Chain Attack We Covered Four Days Ago. The Ransom Deadline Is Tomorrow.

Rockstar Games Just Confirmed It Was Breached. ShinyHunters Used the Exact Anodot Supply Chain Attack We Covered Four Days Ago. The Ransom Deadline Is Tomorrow.

Atarus Security Team

Apr 130 min read

Every App on Your Phone Is a Tracking Device. Citizen Lab Just Exposed How Law Enforcement Buys Advertising Data to Surveil 500 Million Devices Across 120 Countries. No Warrant Required.

Every App on Your Phone Is a Tracking Device. Citizen Lab Just Exposed How Law Enforcement Buys Advertising Data to Surveil 500 Million Devices Across 120 Countries. No Warrant Required.

Every App on Your Phone Is a Tracking Device. Citizen Lab Just Exposed How Law Enforcement Buys Advertising Data to Surveil 500 Million Devices Across 120 Countries. No Warrant Required.

Atarus Security Team

Apr 120 min read

Two Supply Chain Attacks in One Day. This Morning It Was a WordPress Plugin. Tonight It Is CPU-Z and HWMonitor, the Tools Every IT Professional Downloads.

Two Supply Chain Attacks in One Day. This Morning It Was a WordPress Plugin. Tonight It Is CPU-Z and HWMonitor, the Tools Every IT Professional Downloads.

Two Supply Chain Attacks in One Day. This Morning It Was a WordPress Plugin. Tonight It Is CPU-Z and HWMonitor, the Tools Every IT Professional Downloads.

Atarus Security Team

Apr 110 min read

A WordPress Plugin Used on 800,000 Sites Had Its Update System Hijacked. For Six Hours, Every Site That Clicked "Update" Installed a Fully Weaponized Remote Access Toolkit. The Plugin Was the Malware.

A WordPress Plugin Used on 800,000 Sites Had Its Update System Hijacked. For Six Hours, Every Site That Clicked "Update" Installed a Fully Weaponized Remote Access Toolkit. The Plugin Was the Malware.

A WordPress Plugin Used on 800,000 Sites Had Its Update System Hijacked. For Six Hours, Every Site That Clicked "Update" Installed a Fully Weaponized Remote Access Toolkit. The Plugin Was the Malware.

Atarus Security Team

Apr 100 min read

Iran Is Hacking the PLCs That Run American Water Systems, Power Grids, and Government Facilities. Six Federal Agencies Just Published a Joint Advisory. Some Victims Have Already Lost Money and Operati

Iran Is Hacking the PLCs That Run American Water Systems, Power Grids, and Government Facilities. Six Federal Agencies Just Published a Joint Advisory. Some Victims Have Already Lost Money and Operati

Iran Is Hacking the PLCs That Run American Water Systems, Power Grids, and Government Facilities. Six Federal Agencies Just Published a Joint Advisory. Some Victims Have Already Lost Money and Operati

Atarus Security Team

Apr 90 min read

A SaaS Analytics Company Got Breached. Its Authentication Tokens Were Used to Raid Snowflake Customers. ShinyHunters Is Already Extorting the Victims. This Is the Third Token Theft Campaign This Week.

A SaaS Analytics Company Got Breached. Its Authentication Tokens Were Used to Raid Snowflake Customers. ShinyHunters Is Already Extorting the Victims. This Is the Third Token Theft Campaign This Week.

A SaaS Analytics Company Got Breached. Its Authentication Tokens Were Used to Raid Snowflake Customers. ShinyHunters Is Already Extorting the Victims. This Is the Third Token Theft Campaign This Week.

Atarus Security Team

Apr 90 min read

The Same Week Russia Stole Tokens from 18,000 Routers and Fortinet Dropped Its Second Zero-Day in Two Weeks, the White House Proposed Cutting CISA's Budget by $707 Million.

The Same Week Russia Stole Tokens from 18,000 Routers and Fortinet Dropped Its Second Zero-Day in Two Weeks, the White House Proposed Cutting CISA's Budget by $707 Million.

The Same Week Russia Stole Tokens from 18,000 Routers and Fortinet Dropped Its Second Zero-Day in Two Weeks, the White House Proposed Cutting CISA's Budget by $707 Million.

Atarus Security Team

Apr 80 min read

Russia Hijacked 18,000 Routers Across 120 Countries to Steal Microsoft Office Tokens. No Malware. No Code. Just DNS. The FBI Just Shut It Down.

Russia Hijacked 18,000 Routers Across 120 Countries to Steal Microsoft Office Tokens. No Malware. No Code. Just DNS. The FBI Just Shut It Down.

Russia Hijacked 18,000 Routers Across 120 Countries to Steal Microsoft Office Tokens. No Malware. No Code. Just DNS. The FBI Just Shut It Down.

Atarus Security Team

Apr 70 min read

Fortinet's Endpoint Management Server Has Been Under Attack Since March 31. The Patch Dropped Saturday. CISA Gave Federal Agencies Three Days. You Should Give Yourself Less.

Fortinet's Endpoint Management Server Has Been Under Attack Since March 31. The Patch Dropped Saturday. CISA Gave Federal Agencies Three Days. You Should Give Yourself Less.

Fortinet's Endpoint Management Server Has Been Under Attack Since March 31. The Patch Dropped Saturday. CISA Gave Federal Agencies Three Days. You Should Give Yourself Less.

Atarus Security Team

Apr 70 min read

Drift's Post-Mortem Is Out. North Korea Posed as a Trading Firm for Six Months. Met the Team in Person. Deposited $1 Million. Then Stole $285 Million in 12 Minutes.

Drift's Post-Mortem Is Out. North Korea Posed as a Trading Firm for Six Months. Met the Team in Person. Deposited $1 Million. Then Stole $285 Million in 12 Minutes.

Drift's Post-Mortem Is Out. North Korea Posed as a Trading Firm for Six Months. Met the Team in Person. Deposited $1 Million. Then Stole $285 Million in 12 Minutes.

Atarus Security Team

Apr 60 min read

Your MFA Won't Save You. Device Code Phishing Has Surged 37x This Year. Eleven Attack Kits Now Sell Microsoft 365 Account Takeover as a Service.

Your MFA Won't Save You. Device Code Phishing Has Surged 37x This Year. Eleven Attack Kits Now Sell Microsoft 365 Account Takeover as a Service.

Your MFA Won't Save You. Device Code Phishing Has Surged 37x This Year. Eleven Attack Kits Now Sell Microsoft 365 Account Takeover as a Service.

Atarus Security Team

Apr 60 min read

Every Time You Open LinkedIn, Hidden JavaScript Scans Your Browser for 6,000 Extensions. It Knows Your Religion, Your Politics, Your ADHD Tools, and Whether You Are Secretly Job Hunting.

Every Time You Open LinkedIn, Hidden JavaScript Scans Your Browser for 6,000 Extensions. It Knows Your Religion, Your Politics, Your ADHD Tools, and Whether You Are Secretly Job Hunting.

Every Time You Open LinkedIn, Hidden JavaScript Scans Your Browser for 6,000 Extensions. It Knows Your Religion, Your Politics, Your ADHD Tools, and Whether You Are Secretly Job Hunting.

Atarus Security Team

Apr 50 min read

Contact

info@atarussecurity.com

Legal

Atarus Offensive Security LLC.

© 2026 Atarus Offensive Security LLC. All rights reserved.

Precision Strike-Force Execution

bottom of page