Latest Intelligence

Blog · Nov 2, 2026

North Korean Kimsuky Group: Operation GitPower GitHub Staging Still Live Three Weeks After Disclosure

Blog · Oct 31, 2026

Inside China’s Exposed “Key Figures” Database for Ethnic External Propaganda

On October 24, 2026, the VULONE Team discovered an operational Chinese database titled 民族外宣重点人物信息库 (Key Figures Information Database for Ethnic External Propaganda). Linked to the China Internet Information Center (CIIC) and DeepChina, it held 2,580 records across 103 countries, structured as a 22-column CRM for tracking and countering voices on ethnic issues. The platform was left unencrypted on the public internet.

Blog · Oct 26, 2026

Inside a Commercial Account-Takeover Operation: Device-Trust Abuse Against Brazilian Retail Accounts

A commercial account-takeover service that forged “trusted device” records to sign into Brazilian retail accounts without ever triggering a second factor.

Blog · Oct 19, 2026

China-Linked Hackers Targeted Governments Across Asia. We Hacked Their Infrastructure.

A China-linked operator ran 66 AI-driven intrusions against government and industry targets across Asia from a single exposed server, reaching 48 systems before the whole operation leaked onto the open internet.

Blog · Sep 15, 2026

NASBleed: Inside a 343k-Host Credential Spill

343,000 plain-text NAS and RDP logins found sitting in an open directory, most of them factory defaults. How the dump feeds access brokers, and what to check now.