<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>CyberCyber Labs</title>
    <link>https://cybercyberlabs.com/</link>
    <description>Research reports from CyberCyber Labs.</description>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 00:00:00 GMT</lastBuildDate>
    <atom:link href="https://cybercyberlabs.com/feed.xml" rel="self" type="application/rss+xml"/>
    <item>
      <title>Watermark My Words</title>
      <link>https://cybercyberlabs.com/reports/watermark-my-words.html</link>
      <guid isPermaLink="true">https://cybercyberlabs.com/reports/watermark-my-words.html</guid>
      <pubDate>Thu, 08 Oct 2026 00:00:00 GMT</pubDate>
      <description>When AI provenance starts changing the answer</description>
      <enclosure url="https://cybercyberlabs.com/reports/Watermark-My-Words.pdf" length="222684" type="application/pdf"/>
    </item>
    <item>
      <title>Lazy Vibes</title>
      <link>https://cybercyberlabs.com/reports/lazy-vibes.html</link>
      <guid isPermaLink="true">https://cybercyberlabs.com/reports/lazy-vibes.html</guid>
      <pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate>
      <description>Working files of an operation that told AI agents to pentest: scanners, exploit scripts, copied source, credentials, and command agents</description>
      <enclosure url="https://cybercyberlabs.com/reports/Lazy-Vibes.pdf" length="144167" type="application/pdf"/>
    </item>
    <item>
      <title>Inside Exposed C2</title>
      <link>https://cybercyberlabs.com/reports/inside-exposed-c2.html</link>
      <guid isPermaLink="true">https://cybercyberlabs.com/reports/inside-exposed-c2.html</guid>
      <pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate>
      <description>Brazilian government compromise, credential theft, mass exploitation, cryptomining, and SEO malware</description>
      <enclosure url="https://cybercyberlabs.com/reports/Inside-Exposed-C2.pdf" length="728982" type="application/pdf"/>
    </item>
    <item>
      <title>Spyder Fighter</title>
      <link>https://cybercyberlabs.com/reports/spyder-fighter.html</link>
      <guid isPermaLink="true">https://cybercyberlabs.com/reports/spyder-fighter.html</guid>
      <pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate>
      <description>Analysis of Spyder malware targeting an Indian political office, including defensive C2 sinkholing.</description>
      <enclosure url="https://cybercyberlabs.com/reports/Spyder-Fighter-Analysis.pdf" length="187934" type="application/pdf"/>
    </item>
    <item>
      <title>Salted Leeches</title>
      <link>https://cybercyberlabs.com/reports/salted-leeches.html</link>
      <guid isPermaLink="true">https://cybercyberlabs.com/reports/salted-leeches.html</guid>
      <pubDate>Sun, 06 Apr 2025 00:00:00 GMT</pubDate>
      <description>An investigation into a Chinese online scam ring infrastructure</description>
      <enclosure url="https://cybercyberlabs.com/reports/Salted_Leeches.pdf" length="3663772" type="application/pdf"/>
    </item>
    <item>
      <title>Shiny Hunters</title>
      <link>https://cybercyberlabs.com/reports/shiny-nemesis.html</link>
      <guid isPermaLink="true">https://cybercyberlabs.com/reports/shiny-nemesis.html</guid>
      <pubDate>Sun, 24 Nov 2024 00:00:00 GMT</pubDate>
      <description>Mass scanning effort targeting AWS customers</description>
      <enclosure url="https://cybercyberlabs.com/reports/Shiny_Nemesis.pdf" length="53476" type="application/pdf"/>
    </item>
  </channel>
</rss>
