Lunar Domain Exposure

When a machine gets infected by an infostealer like LummaC2 or Vidar, the malware leaves behind a specific set of output folders. Most threat actors focus on the easy, structured targets: browser cookies, saved passwords pulled from SQLite databases, and

The telemetry indicates a significant exposure event impacting hootsuite.com, with over 422,000 total events recorded between September 2025 and August 2026....

When a security team discovers an infostealer infection, the response usually follows a familiar sequence. The team isolates or rebuilds the endpoint, resets the employee's passwords, revokes browser sessions, reviews MFA, and investigates account activit

Password managers were designed around a simple security model: even if an attacker reaches a server, steals a database, or intercepts encrypted data, strong client-side encryption keeps the stored passwords protected. Modern infostealers attack a differe

AmnesiaStealer looks at first like another entry in the growing market for macOS infostealers. A victim lands on a counterfeit GitHub download page, follows a ClickFix instruction, pastes a command into Terminal, and launches malware that grabs passwords,

Search for a Roblox executor, Minecraft mod, or game cheat and the security story appears familiar. A player downloads a fake tool, malware runs, and the attacker steals a Discord account, browser cookies, passwords, or cryptocurrency. Recent campaigns re

Data breach monitoring has spent years getting better at discovery. Security teams search breach dumps, stealer logs, paste sites, ransomware leak sites, Telegram channels, dark-web markets, and other criminal sources for corporate email addresses, creden

We've released a new set of features for Lunar Essential, giving security teams more ways to investigate incidents, automate response, and connect Lunar to the tools they already use. Just as importantly, Lunar is built to be easy to adopt. It's a self-se

Most of the discussion around EtherRAT and EtherHiding starts with takedown resistance. That makes sense. A domain registrar can suspend a domain, a hosting provider can terminate a server, and a platform can remove an account. An Ethereum smart contract

IBM's 2026 Cost of a Data Breach Report arrived with a headline built for immediate attention: one in four malicious breaches involved AI, AI-driven attacks increased 56%, and those incidents cost organizations an average of $6.04 million. Early coverage