Malware & Threats
Fake CAPTCHA pages instruct victims to paste malicious commands in the Windows Terminal instead of the Run dialog.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.
Malware & Threats
Turla has been using the backdoor against government and military organizations in Ukraine for espionage.
Cybercrime
Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.
Malware & Threats
Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.
Malware & Threats
Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.
Malware & Threats
The malware targets browser and cryptocurrency wallet data, along with system information and user files.
Malware & Threats
Employees seeking free versions of paid software may unknowingly install malware-laced “cracked” apps that can steal credentials, deploy cryptominers, or open the door to...
Malware & Threats
Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors.
Malware & Threats
Other noteworthy stories that might have slipped under the radar: cyber valuations surge, OpenAI disrupts malicious AI use, ShinyHunters claims Odido breach.
Malware & Threats
Aeternum operates on smart contracts, making its command-and-control (C&C) infrastructure difficult to disrupt.
Malware & Threats
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
Malware & Threats
The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries.
Malware & Threats
Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files.
Malware & Threats
The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch.
Cybercrime
The FBI has confirmed that the Ploutus malware, which has been around for over a decade, is still being used in the wild.
Malware & Threats
The malware leverages Gemini to analyze on-screen elements and ensure that it remains on the device even after a reboot.
Malware & Threats
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.
Malware & Threats
The malware has been preinstalled on many devices but it has also been distributed through Google Play and other app stores.
Malware & Threats
GTIG and Mandiant said the zero-day tracked as CVE-2026-22769 has been exploited by UNC6201 since at least 2024.
Malware & Threats
Attackers are using DNS requests to deliver a RAT named ModeloRAT to targeted users.
Malware & Threats
With more than 37 million combined downloads, the extensions expose users to tracking and personal information theft.
Cyberwarfare
Transparent Tribe (APT36) is targeting Indian defense and government sectors with GETA, ARES, and Desk RATs in a new wave of economic cyber espionage.
Malware & Threats
Available via Telegram, researchers warn ZeroDayRAT is a ‘complete mobile compromise toolkit’ comparable to kits normally requiring nation-state resources to develop.
Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.
RegisterThis year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
RegisterExpert Insights
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
(Joshua Goldfarb)
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
(Danelle Au)
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
(Etay Maor)
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)