Malware & Threats
The ‘download’ button on the official EmEditor website served a malicious installer.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware.
Malware & Threats
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The package provides legitimate functionality to evade detection, while stealing users’ data and deploying a backdoor.
Malware & Threats
A recent MacSync Stealer version no longer requires users to directly interact with the terminal for execution.
Malware & Threats
The hacking group has been using Group Policy to deploy cyberespionage tools on governmental networks.
Malware & Threats
Linked to the Aisuru IoT botnet, Kimwolf was seen launching over 1.7 billion DDoS attack commands and increasing its C&C domain’s popularity.
Malware & Threats
France’s counterespionage agency is investigating a suspected cyberattack plot targeting an international passenger ferry
Malware & Threats
The critical zero-day is tracked as CVE-2025-20393 and it impacts Secure Email Gateway and Secure Email and Web Manager appliances.
Malware & Threats
The malware provides full device control and real-time surveillance capabilities like those of advanced spyware.
Malware & Threats
The malware hijacks purchase commissions, tracks users, removes security headers, injects hidden iframes, and bypasses CAPTCHA.
Malware & Threats
After years of exploiting zero-day and n-day vulnerabilities, Russian state-sponsored threat actors are shifting to misconfigured devices.
Malware & Threats
Google has also mentioned seeing React2Shell attacks conducted by Iranian threat actors.
Malware & Threats
Notepad++ found a vulnerability in the way the software updater authenticates update files.
Malware & Threats
Security firms have seen cryptocurrency miners, Linux backdoors, botnet malware, and various post-exploitation implants in React2Shell attacks.
Malware & Threats
North Korean threat actors are believed to be behind CVE-2025-55182 exploitation delivering EtherRAT.
IoT Security
The botnet attempts to steal credentials from infected TBK DVR devices, in addition to abusing them to launch DDoS attacks.
Malware & Threats
Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.
Malware & Threats
The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF).
Malware & Threats
The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access.
Malware & Threats
Albiriox is a banking trojan offered under a malware-as-a-service model for $720 per month.
Malware & Threats
APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.
Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)