Threat desk
Verified reporting on cyber incidents, malicious automation, credential abuse, malware operations, and attacks that affect web-facing services.
4 published articlesLatest in this category
Google says coordinated action against NetNut degraded a residential proxy network used to conceal malicious activity. The case shows why a residential IP address cannot be treated as proof of a trusted user.
Read article: Google Disrupts the NetNut Residential Proxy Network →Imperva's 2026 Bad Bot Report says automated traffic exceeded human traffic in its 2025 dataset, while APIs and identity systems remained prominent targets. The response is governance, not indiscriminate blocking.
Read article: Imperva Says Automated Traffic Exceeded 53% in 2025 →Researchers say the Blacksite adversary-in-the-middle phishing kit is bundled with Cloaked.gg to serve benign decoys to suspected scanners while exposing live phishing pages to selected visitors.
Read article: Blacksite Phishing Kit Uses Cloaking to Evade URL Scanners →Akamai says AI bots represented 47.9% of commerce traffic on its network by December 2025. The finding makes intent, identity, and action-level policy more important than a binary human-or-bot label.
Read article: Akamai Reports AI Bots at 47.9% of Commerce Traffic →
