Malware & Threats
Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant maintained decade-long stealth, unpatched...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.
Malware & Threats
Turla has been using the backdoor against government and military organizations in Ukraine for espionage.
Cybercrime
Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.
Malware & Threats
Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.
Malware & Threats
CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution.
Malware & Threats
The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.
Malware & Threats
Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.
Malware & Threats
The Android malware allows its operators to take control of infected devices and harvest sensitive information.
Malware & Threats
The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control.
Malware & Threats
Arch Linux suspended account registrations in response to the wave of malicious packages being uploaded to AUR.
Cybercrime
Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution techniques.
Identity & Access
As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomware and other cybercrime operations.
Malware & Threats
The most recent variants of the self-propagating attacks are named Miasma and Hades.
Cybercrime
Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities.
Malware & Threats
The attackers had access to a senior executive’s email account for 150 days and exfiltrated data for months.
Cybercrime
Noteworthy stories that might have slipped under the radar: Trump Mobile exposes customer data, phishers target the 2026 FIFA World Cup, CISA responds to...
Artificial Intelligence
Researchers warn GreyVibe’s extensive use of ChatGPT, Gemini, and other AI tools offers a glimpse into how future cybercriminal and state-aligned groups will operate.
Malware & Threats
Delivered via phishing lures, the malware combines financial theft with data exfiltration and remote access.
Malware & Threats
Security firms took down all four command-and-control (C&C) channels used by the GlassWorm malware.
Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.
RegisterThis year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
RegisterExpert Insights
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
(Joshua Goldfarb)
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
(Danelle Au)
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
(Etay Maor)
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)