Malware & Threats
The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android...
Malware & Threats
The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.
Malware & Threats
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
Artificial Intelligence
The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.
Artificial Intelligence
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands.
Malware & Threats
The malware framework uses a modular architecture and a custom executable file format for long-term persistence.
Malware & Threats
The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised.
Malware & Threats
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul.
Artificial Intelligence
A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration.
Malware & Threats
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware.
Malware & Threats
The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion.
Malware & Threats
Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.
Malware & Threats
US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C.
Malware & Threats
The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools.
Malware & Threats
Ads led to a ClickFix page designed to trick macOS and Windows users into installing malware.
Malware & Threats
The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.
Malware & Threats
The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surveillance.
Malware & Threats
The attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)