Malware & Threats
Turla malware was deployed in February on select systems that Gamaredon had compromised in January.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant maintained decade-long stealth, unpatched...
Malware & Threats
CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution.
Malware & Threats
The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.
Malware & Threats
Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.
Malware & Threats
Hackers chained two Ivanti EPMM vulnerabilities to collect system information, dump credentials, and execute malware.
Malware & Threats
RevengeHotels has been targeting hotels in Brazil and Spanish-speaking regions with VenomRAT implants in 2025.
Malware & Threats
The cybercrime groups tracked as UNC6040 and UNC6395 have been extorting organizations after stealing data from their Salesforce instances.
Malware & Threats
Apple this year sent at least four rounds of notifications to French users potentially targeted by commercial spyware.
Malware & Threats
Hackers mount the host’s file system into fresh containers, fetch malicious scripts over the Tor network, and block access to the Docker API.
Malware & Threats
Google researchers say China-linked UNC6384 combined social engineering, signed malware, and adversary-in-the-middle attacks to evade detection.
Malware & Threats
Competition among malware-as-a-service developers has transformed infostealers into refined, accessible tools for cybercriminals worldwide.
Artificial Intelligence
Proof-of-concept ransomware uses AI models to generate attack scripts in real time.
Malware & Threats
The Anatsa Android banking trojan has expanded its target list to new countries and more cryptocurrency applications.
Malware & Threats
Between June and August, over 300 entities were targeted with the Atomic macOS Stealer via malvertising.
Malware & Threats
PipeMagic, which poses as a ChatGPT application, is a modular malware framework that provides persistent access and flexibility.
Malware & Threats
Noteworthy stories that might have slipped under the radar: federal court filing system hack, Chanel data breach, emergency CISA directive.
Malware & Threats
Microsoft has unveiled Project Ire, a prototype autonomous AI agent that can analyze any software file to determine if it’s malicious.
Malware & Threats
The Koske Linux malware shows how cybercriminals can use AI for payload development, persistence, and adaptivity.
Government
More information has emerged on the ToolShell SharePoint zero-day attacks, including impact, victims, and threat actors.
Malware & Threats
Akamai’s analysis of the Coyote malware revealed that it abuses Microsoft’s UIA accessibility framework to obtain data.
Malware & Threats
The Lumma Stealer is back after Microsoft and law enforcement took action to significantly disrupt the malware’s infrastructure.
Malware & Threats
Microsoft says the Chinese threat actors Linen Typhoon, Violet Typhoon, and Storm-2603 have been exploiting the ToolShell zero-days.
Malware & Threats
More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)