Beyond R57: Uncovering the Identities Behind a Threat Actor Network
r57 is a high-volume database/access broker, not a single-campaign actor. Activity spans 40+ countries across ~160 threads dated late 2023…
Researches, News, and more
DeXpose Blog
World Cup 2026 Threat Report: Scams and Access Flaw
World Cup 2026 Threat Landscape: Phishing, Typosquatting, Web3 Credential Theft, and Broadcast Infrastructure Exposure | DeXpose Executive Summary The 2026…
Google Data Breach 2026 | Non-Google Warnings & Password Check
You trusted Google with your email, passwords, files, and payments. Most people do. With over 3 billion users worldwide, Google…
Data Breaches 2025 | The Complete Tracker of Every Major Incident
In 2025, a data breach occurred somewhere in the world roughly every 2.4 hours. By year’s end, the Identity Theft…
Cybersecurity Breaches | Statistics, Major Incidents & Response Guide (2025–2026)
A cybersecurity breach occurs when an unauthorized party gains access to a system, network, or dataset and exposes, steals, or…
Unmasking Quellostanco: How a Git Commit Exposed a Threat Actor Targeting Egyptian Infrastructure
TL;DR In early 2026, a threat actor using the alias Quellostanco ran a campaign against Egyptian targets: airlines, an aluminium…
Unmasking Lawxsz: Attributing the Developer Behind Valkyrie and Prysmax Stealers
TL;DR This is Part 2 of our investigation into Lawxsz, an Argentinian threat actor behind the Valkyrie, Prysmax, and Packit…
Inside Combolists: the Downstream Cybercrime Economy
In the last blog, we examined how combolists are built from the raw sources (breach dumps, infostealer logs, and SQLi…
n8n: From Parsing Bug to Remote Code Execution aka CVE-2026-42231
Introduction n8n is an open-source node-based workflow automation tool that allows you to connect applications, databases, and AI agents to…
California Data Breach Notification Law | Civil Code 1798.82 Requirements, Deadlines & 2025–2026 Updates
California was the first state in the nation to require businesses to notify consumers when their personal information was compromised.…
