malware
-
Critical FortiSandbox Vulnerability CVE-2026-39808: Public Exploit Now Available
A proof-of-concept (PoC) exploit has been publicly released for a critical security flaw in Fortinet’s FortiSandbox, putting thousands of networks…
Read More » -
ATHR: Integrated Telephony-Based Attack Infrastructure and AI-Driven Voice Social Engineering in TOAD Attack Campaigns
Cybercriminal threat actors are increasingly leveraging telephone-oriented attack delivery (TOAD) methodologies to circumvent conventional email security infrastructure. This trend is…
Read More » -
Exploitation of CVE-2026-39987 in Marimo: A Multi-Stage Attack Campaign Targeting AI/ML Developer Infrastructure
Threat actors are actively exploiting CVE-2026-39987, a critical pre-authentication remote code execution (RCE) vulnerability in the marimo Python notebook platform,…
Read More » -
ZionSiphon Malware Analysis: A Developer Build Targeting Israeli Water Infrastructure
Hackers are currently experimenting with a new form of malware, designated as “ZionSiphon”, which is specifically engineered to compromise Israeli…
Read More » -
Ukrainian Authorities Warn of Surge in Targeted Cyberattacks on Government and Healthcare by UAC-0247
A significant surge in cyberattacks has been detected targeting Ukrainian local governments and municipal healthcare institutions, particularly clinical and ambulance…
Read More » -
Attackers Weaponize Google Cloud Storage to Deliver Remcos RAT Through Phishing Campaigns
Cybercriminals are increasingly leveraging Google Cloud Storage infrastructure to circumvent email and web content filters, deploying Remcos Remote Access Trojan…
Read More » -
Massive WordPress Supply Chain Attack: 30+ Plugins Compromised in Silent Backdoor Operation
A sophisticated supply chain attack targeting WordPress users lay dormant for nearly eight months before activating, ultimately compromising core configuration…
Read More » -
How Cybercriminals Are Turning Your Inbox Rules Into a Backdoor
Hackers are quietly exploiting a built-in Microsoft 365 feature to steal emails, hide security alerts, and maintain long-term access to…
Read More » -
OpenAI Launches GPT-5.4-Cyber to Bolster Cyber Defenses
OpenAI has introduced GPT-5.4-Cyber, a purpose-built variant of its flagship GPT-5.4 model, fine-tuned specifically for advanced defensive cybersecurity workflows. The…
Read More » -
Emerging Android Banking Trojan Mirax: A Stealthy RAT with Residential Proxy Capabilities
A new Android banking trojan called Mirax is rapidly gaining traction in the cybercrime ecosystem, combining powerful remote access features…
Read More » -
New PlugX USB Worm Variant Spreads Globally Using Stealthy DLL Sideloading Techniques
A new variant of the PlugX USB worm is causing renewed concern as it spreads across several continents, leveraging DLL…
Read More » -
Janela RAT: Financial Cybercrime Campaign Using Fake MSI Installers and Malicious Browser Extensions
Janela Remote Access Trojan (RAT) campaigns leverage fake Windows MSI installers and malicious browser extensions to infiltrate financial networks and…
Read More » -
Critical ShowDoc Vulnerability Exposes Organizations to Unauthenticated RCE
Cybersecurity researchers have uncovered a severe vulnerability in ShowDoc, a widely used online document-sharing platform designed for IT teams. Tracked…
Read More »