https://www.derp.ca/ Daily threat intelligence briefings, C2 observations, ransomware claims, and security news from the Derp team. en Thu, 28 May 2026 12:00:00 GMT https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-28/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-28/ Daily threat intelligence for May 28, 2026: 422 C2 observations, 42 ransomware claims, 179 OSV MAL advisories, and 5 news items. Thu, 28 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-27/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-27/ Daily threat intelligence for May 27, 2026: 345 C2 observations, 11 ransomware claims, 431 OSV MAL advisories, and 5 news items. Wed, 27 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-26/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-26/ Daily threat intelligence for May 26, 2026: 400 C2 observations, 21 ransomware claims, 59 OSV MAL advisories, and 5 news items. Tue, 26 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-25/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-25/ Daily threat intelligence for May 25, 2026: 3,154 C2 observations, 19 ransomware claims, 15 OSV MAL advisories, and 5 news items. Mon, 25 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-24/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-24/ Daily threat intelligence for May 24, 2026: 2,738 C2 observations, 15 ransomware claims, 8 OSV MAL advisories, and 5 news items. Sun, 24 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-22/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-22/ 6 news items including a 9-year-old Linux kernel flaw, Cisco CVSS 10.0 patch, Cloudflare CASB-Anthropic integration, First VPN seizure, two actively exploited Microsoft Defender vulnerabilities, and Underminr CDN brand hijacking; 18 ransomware claims across 7 groups and 10 countries; 1,182 C2 observations across 118 families with 297 unique hosts; 304 malware download hosts across 33 countries. Fri, 22 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-21/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-21/ Linux kernel vuln, Defender zero-days, TeamPCP supply-chain spree, 16 ransomware claims, and 769 C2 endpoints across 129 malware families. Thu, 21 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-20/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-20/ YellowKey mitigation, GitHub repo breach, Shai-Hulud npm wave, 14 ransomware claims, and 1,242 C2 family-host pairs across 159 malware families. Wed, 20 May 2026 12:00:00 GMT kirk@derp.ca (Kirk) https://www.derp.ca/dailycybercrime/a-day-in-cybercrime-2026-05-19/ https://www.derp.ca/research/a-day-in-cybercrime-2026-05-19/ Supply chain attacks hit npm, VS Code, and GitHub Actions; 37 ransomware claims from 9 groups; 217 C2 observations across 49 malware families with Quad9 blocking data. Tue, 19 May 2026 12:00:00 GMT kirk@derp.ca (Kirk)