malware

March 25, 2026

Critical Magento Vulnerability Actively Exploited Across Thousands of Stores

A critical vulnerability called “PolyShell” is being actively exploited on Magento and Adobe Commerce platforms, putting thousands of online stores…
Read More »
March 25, 2026

New Study Reveals How Infostealer Infections Lead to Dark Web Exposure in Just 48 Hours

New research highlights how infostealer malware can rapidly convert a single careless click into full credential exposure on dark web…
Read More »
March 25, 2026

Five Malicious npm Packages Target Crypto Developers, Steal Wallet Keys via Telegram

Five malicious npm packages impersonating popular crypto libraries are stealing wallet keys from Solana and Ethereum developers and exfiltrating them…
Read More »
March 24, 2026

DarkSword Exploit Chain Leaked Online, Posing Risk to Millions of iPhones

Security experts haveverified that the advanced iOS exploit chain known as DarkSword is now accessible outside of its original threat…
Read More »
March 24, 2026

Russian Access Broker Jailed for Facilitating Ransomware Attacks Targeting U.S. Companies

A United States federal court sentenced Aleksei Volkov, a 26-year-old Russian national, to 81 months in prison for operating as…
Read More »
March 23, 2026

Oblivion RAT Masquerades as Play Store Update to Spy on Android Users

A newly discovered Android remote access trojan (RAT) called Oblivion RAT is raising concerns across the mobile threat landscape. Marketed…
Read More »
March 23, 2026

MioLab MacOS Stealer Expands With ClickFix, Wallet Theft, Team APIs

As Apple’s macOS footprint grows in both consumer and enterprise environments, dedicated infostealers like MioLab (aka Nova) demonstrate that Macs…
Read More »
March 22, 2026

VoidStealer Malware Cracks Chrome’s Master Encryption Key with Novel Hardware Breakpoint Technique

An information stealer called VoidStealer employs a novel technique to bypass Chrome’s Application-Bound Encryption (ABE) and extract the master key…
Read More »
March 21, 2026

Safer Sideloading Arrives with Android’s Advanced Flow

Google has announced a new mechanism in Android called Advanced Flow, which enables power users to sideload APKs from unverified…
Read More »
March 21, 2026

Trivy Vulnerability Scanner Compromised to Inject Malicious Scripts That Steal Credentials

Ahighly sophisticated supply chain attack has successfully compromised the official Trivy GitHub Actions repository, severely impacting continuous integration environments. Discovered…
Read More »
March 21, 2026

Oracle Fixes High-Severity RCE Vulnerability Affecting Identity and Web Services Platforms

Oracle recently issued an urgent security alert regarding a critical Remote Code Execution (RCE) flaw that impacts both Oracle Identity…
Read More »
March 20, 2026

Copyright Complaint Lures Linked to New PureLog Stealer Credential Theft Wave

Criminals are actively deploying the PureLog Stealer malware through a sophisticated, multi-stage assault campaign that disguises itself as legitimate copyright…
Read More »
March 20, 2026

Fake Tools and CDNs Power New “Vibe-Coded” Malware Campaign

“Vibe coding” has evolved from a buzzword to a key battleground, and a new malware campaign shows how attackers are…
Read More »
March 19, 2026

Pyronut Package Backdoors Telegram Bots With RCE

Malicious ‘Pyronut’ is a trojanized Python package that backdoors Telegram bots and userbots, giving attackers remote code execution over both…
Read More »
March 19, 2026

Iran-Linked Botnet Exposed After Open Directory Leak Reveals 15-Node Relay Network

A misconfigured opendirectory on an Iranian server has exposed a live censorship-bypass relay and SSH-based botnet operation, revealing how a…
Read More »
March 18, 2026

ForceMemo Hijacks GitHub Accounts, Backdoors Python Repos

ForceMemo represents an active campaign targeting GitHub accounts and Python repositories, leveraging force-pushed commits to silently implant malware. Utilizing GlassWorm’s…
Read More »
March 16, 2026

IBM Discovers ‘Slopoly’ AI-Generated Malware Linked to Hive0163 Ransomware

Hive0163, a financially driven ransomware group, is testing a probable AI-generated malware framework named “Slopoly,” signaling a rapid shift toward…
Read More »
March 16, 2026

Google Unveils Android 17 Advanced Protection Mode to Stop Malicious Services

Google is preparing to launch Android 17, introducing a comprehensive suite of new features aimed at dramatically enhancing device security,…
Read More »
March 16, 2026

CamelClone Uses Public File-Sharing Sites in Government Cyberattacks

A new cyber espionage campaign dubbed Operation CamelClone is targeting government and strategic sectors across several geopolitically significant regions. The…
Read More »
March 14, 2026

Storm-2561 Uses SEO Poisoning, Fake Signed VPN Apps to Steal Enterprise Credentials

A financially motivated threat actor tracked as Storm-2561 is running a credential theft campaign that abuses SEO poisoning and fake,…
Read More »

Previous page Next page