Artificial Intelligence DeepSeek’s Malware-Generation Capabilities Put to Test Researchers have analyzed the ability of the Chinese gen-AI DeepSeek to create malware such as ransomware and keyloggers. Eduard KovacsMarch 13, 2025
Malware & Threats Microsoft Flags Six Active Zero-Days, Patches 57 Flaws: Patch Tuesday Redmond ships major security updates with warnings that a half-dozen Windows vulnerabilities have already been exploited in the wild. Ryan NaraineMarch 11, 2025
Malware & Threats New Ballista IoT Botnet Linked to Italian Threat Actor Cato Networks has analyzed a new IoT botnet named Ballista, which targets TP-Link Archer routers. Eduard KovacsMarch 11, 2025
Malware & Threats Trump Coins Used as Lure in Malware Campaign Binance is being spoofed in an email campaign using free TRUMP Coins as a lure leading to the installation of the ConnectWise RAT. Kevin TownsendMarch 10, 2025
Malware & Threats Critical PHP Vulnerability Under Mass Exploitation GreyNoise warns of mass exploitation of a critical vulnerability in PHP leading to remote code execution on vulnerable servers. Ionut ArghireMarch 10, 2025
IoT Security Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution. Eduard KovacsMarch 7, 2025
Malware & Threats Microsoft Says One Million Devices Impacted by Infostealer Campaign Microsoft has uncovered a malvertising campaign that redirected users to information stealers hosted on GitHub. Ionut ArghireMarch 7, 2025
Malware & Threats How Social Engineering Sparked a Billion-Dollar Supply Chain Cryptocurrency Heist The $1.4 billion ByBit cryptocurrency heist combined social engineering, stolen AWS session tokens, MFA bypasses and a rigged JavaScript file. Ryan NaraineMarch 6, 2025
IoT Security BadBox Botnet Powered by 1 Million Android Devices Disrupted A second iteration of the BadBox botnet that affected over one million Android devices has been partially disrupted. Ionut ArghireMarch 6, 2025
Malware & Threats China Hackers Behind US Treasury Breach Caught Targeting IT Supply Chain Silk Typhoon APT caught using IT supply chain entry points to conduct reconnaissance, siphon data, and move laterally on victim networks. Ryan NaraineMarch 5, 2025
IoT Security New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices The Eleven11bot botnet has been described as one of the largest known DDoS botnets observed in recent years. Eduard KovacsMarch 5, 2025
Malware & Threats 26 New Threat Groups Spotted in 2024: CrowdStrike CrowdStrike has published its 2025 Global Threat Report, which warns of faster breakout time and an increase in Chinese activity. Eduard KovacsFebruary 27, 2025