Linux

April 29, 2026

Analyzing Vect 2.0: The Evolution of a High-Tempo Multi-Platform RaaS Threat

The ransomware landscape is shifting from localized malware attacks to sophisticated, multi-platform operations. Leading this charge is Vect 2.0, a…
Read More »
April 24, 2026

Critical Memory Corruption Vulnerability Discovered in Python’s asyncio on Windows

A significant security flaw has surfaced within Python’s asyncio module, specifically targeting Windows environments. This high-severity vulnerability introduces the risk…
Read More »
April 23, 2026

Beyond the CDN: How the js-logger-pack Supply Chain Attack Weaponizes Hugging Face for Data Exfiltration

In a sophisticated evolution of supply-chain tactics, the malicious npm package js-logger-pack has transitioned from using Hugging Face as a…
Read More »
April 23, 2026

Harvester APT Deploys Linux Variant of GoGra Backdoor via Microsoft Graph API, Outlook Mailboxes

In a significant pivot for cyber espionage tactics, security researchers have uncovered a Linux-compatible variant of the GoGra backdoor. This…
Read More »
April 21, 2026

SideWinder APT Leverages Cloudflare Workers and Tailored PDF Lures in Sophisticated Zimbra Phishing Campaign

A highly sophisticated credential-harvesting operation, attributed to the SideWinder APT, has been identified targeting critical South Asian government infrastructure. The…
Read More »
April 18, 2026

Nexcorium: Aggressive Mirai Botnet Exploits Critical IoT Vulnerability

A new Mirai malware variant dubbed Nexcorium is actively compromising unpatched Internet of Things (IoT) devices, with attackers exploiting a…
Read More »
April 17, 2026

Exploitation of CVE-2026-39987 in Marimo: A Multi-Stage Attack Campaign Targeting AI/ML Developer Infrastructure

Threat actors are actively exploiting CVE-2026-39987, a critical pre-authentication remote code execution (RCE) vulnerability in the marimo Python notebook platform,…
Read More »
April 16, 2026

Google Releases Critical Chrome Security Update Patching 31 Vulnerabilities

Google has released an urgent security update addressing a substantial vulnerability landscape in its Chrome web browser, patching 31 distinct…
Read More »
April 14, 2026

Exposed Botnet Panel Reveals Live Twitter/X Credential-Stuffing Operation With No Authentication

A fully operational credential-stuffing botnet targeting Twitter/X accounts has been discovered running entirely without authentication, leaving its command-and-control infrastructure, worker…
Read More »
April 14, 2026

China-Linked APT41 Deploys Stealthy Linux Backdoor with SMTP Command-Control

Security researchers have uncovered a previously undocumented Linux backdoor attributed to China-linked APT41 (Winnti) group, actively targeting cloud workloads across…
Read More »
April 13, 2026

Iran’s CyberAv3ngers Escalates Attacks on U.S. Water Utilities and Industrial Systems

CyberAv3ngers, an Iranian state-linked threat group, has intensified disruptive campaigns against U.S. water utilities and industrial control systems, shifting from…
Read More »
April 13, 2026

VIPERTUNNEL: Python Malware Unmasked Through Fake DLLs & Multi-Stage Obfuscation

Hackers are leveraging a sophisticated Python backdoor called VIPERTUNNEL to establish covert command-and-control channels in victim networks. The attack chain…
Read More »
April 9, 2026

Linux Foundation Leader Impersonated in Slack Attack on Open Source Developers

A social engineering campaign is actively targeting open source developers through Slack. The warning was shared through the OpenSSF Siren…
Read More »
April 9, 2026

Critical Chrome Flaws Let Attackers Execute Arbitrary Code

Google has released an urgent security update for its Chrome browser, resolving multiple dangerous vulnerabilities. The Chrome team promoted version…
Read More »
April 8, 2026

Anthropic Launches Claude Mythos Preview Focused on Zero-Day Vulnerability Discovery

Anthropic recently unveiled Claude Mythos Preview, a groundbreaking general-purpose language model demonstrating an unprecedented, emergent ability to autonomously discover and…
Read More »
April 7, 2026

CUPS Vulnerabilities Could Allow Remote Attackers to Achieve Root-Level Code Execution

A team of AI-driven vulnerability hunting agents directed by security researcher Asim Viladi Oglu Manizada has discovered two critical security…
Read More »
April 7, 2026

BPFDoor Variants Hide with Stateless C2 and ICMP Relay Tactics

Seven novel BPFDoor variants enhance Linux backdoor tradecraft, embedding implants deep within kernel space to evade detection in extensive telecom…
Read More »
April 3, 2026

Axios npm compromise traced to targeted social engineering attack

The recent compromise of the widely used Axios npm package has been confirmed as the result of a targeted social…
Read More »
April 1, 2026

Top 10 Best Dynamic Application Security Testing (DAST) Platforms in 2026

In today’s fast-paced software development world, where applications are released at an unprecedented rate, ensuring their security is more critical…
Read More »
April 1, 2026

Google Warns of New Chrome Zero-Day Under Active Exploitation — Users Urged to Update Immediately

Google has released an urgent security update for Chrome desktop (version 146.0.7680.177/.178 for Windows/Mac, 146.0.7680.177 for Linux) to patch 21…
Read More »

Previous page Next page