Threats

Dead drop resolvers use blockchain reads to fetch malware C2 pointers at runtime, with examples on EVM, Solana, and TON.

Google removed “AI Sidebar with DeepSeek AI” for scraping AI conversations, then it returned in July 2026 with an update/uninstall affiliate redirect payload.

Broadcom updated VMware vDefend and Avi Load Balancer for VMware Cloud Foundation, adding lateral security, on-prem and air-gapped support, and WAAP/API protection.

Broadcom updated VMware vDefend and Avi Load Balancer for VMware Cloud Foundation, adding ATP 1-2-3, on-prem malware, air-gapped support, and AI assistant.

Netskope Threat Labs says 28 malicious npm versions were published across four namespaces using one stealer payload and Ethereum-based C2 resolution.

Arctic Wolf launched a partner-led Cyber AI Readiness Accelerator combining Aurora attack surface management with a 30-day assessment and roadmap.

Proofpoint joined Google Unified Security Recommended as a partner, citing validated Google Cloud Security integrations and operational efficiency improvements.

Netskope Threat Labs reported an April 2026 campaign that targets AI developers by using cloned GitHub repositories and delivering an infostealer via SmartLoader with Polygon-based C2 resolution.

Arctic Wolf launched Cyber Resilience with security operations, exposure management, incident response, and up to $3 million warranty coverage.

Infoblox’s 2026 Threat Landscape Report uses DNS telemetry to describe how cybercrime operates through industrialized services, hidden infrastructure, and short-lived domains. It cites domain risk rates, traffic distribution systems, short activity windows, and residential proxy usage, plus a rise in scam-related domains, arguing for preemptive security approaches.

NSS Labs reported Zscaler Zero Trust Exchange scored 98.85% in an SSE Threat Protection test using v3.0 methodology.

Rapid7 Cyber GRC became generally available, adding native GRC capabilities to connect governance workflows with live security operations data.