Malware & Threats
Palo Alto Networks has not attributed the APT activity to any specific country, but evidence points to China.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant maintained decade-long stealth, unpatched...
Malware & Threats
CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution.
Malware & Threats
The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.
Malware & Threats
Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.
Malware & Threats
Albeit mainly considered a theoretical risk, the flaw has been exploited to disable protections and deliver malware.
Malware & Threats
The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.
Malware & Threats
A hacker published malicious versions of four established VS Code extensions to distribute a GlassWorm malware loader.
Malware & Threats
Security leaders share how artificial intelligence is changing malware, ransomware, and identity-led intrusions, and how defenses must evolve.
Malware & Threats
Of 3,100 unprotected MongoDB instances, half remain compromised, most of them by a single threat actor.
Malware & Threats
Hackers compromised a MicroWorld Technologies update server and fed a malicious file to eScan customers.
Malware & Threats
Android users were lured to applications that served a malicious payload hosted in a Hugging Face repository.
Artificial Intelligence
An LLMjacking operation has been targeting exposed LLMs and MCPs at scale, for commercial monetization.
Malware & Threats
One of the largest residential proxy networks, IPIDEA enrolled devices through SDKs for mobile and desktop.
Malware & Threats
Russian and Chinese state-sponsored threat actors have been exploiting CVE-2025-8088 since July 2025.
Artificial Intelligence
Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim's ChatGPT data.
Malware & Threats
Priced $2,000 - $6,000 on a cybercrime forum, the MaaS toolkit promises publication on the Chrome Web Store.
ICS/OT
10 years after disrupting the Ukrainian power grid, the APT targeted Poland with data-wiping malware.
Malware & Threats
The hackers trick victims into accessing GitHub or GitLab repositories that are opened using Visual Studio Code.
Malware & Threats
Providing cyberespionage and remote code execution capabilities, the malware is executed via DLL sideloading.
Malware & Threats
The information stealer abuses legitimate APIs and libraries to exfiltrate data to Discord webhooks.
Malware & Threats
Posing as an ad blocker, the malicious extension crashes the browser to lure victims into installing malware.
Malware & Threats
Designed for long-term access, the framework targets cloud and container environments with loaders, implants, and rootkits.
Malware & Threats
The Predator spyware is more sophisticated and dangerous than previously realized.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
(Tod Beardsley)
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)