-
Astaroth operators have expanded their Brazilian banking malware operations by weaponizing a new WhatsApp Web spambot module that turns infected hosts into automated malware relays, marking a significant evolution of the LATAM e-crime ecosystem. Tradit…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert to the Water and Wastewater Systems (WWS) Sector due to a significant rise in cyber threat activity targeting internet-exposed programmable logic controllers (P…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical vulnerability chain in Azure Cosmos DB, named CosmosEscape, allowed attackers to gain full read and write access to every Cosmos DB database, including potentially those managed internally by Microsoft. The issue specifically affected the se…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OctLurk and SilkLurk are highly customized, memory‑resident backdoors used in an ongoing cyberespionage campaign against government and critical‑sector networks across Central Asia and Syria, operated by a Chinese‑speaking threat actor but not yet link…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Analog Devices, Inc. has confirmed that unauthorized actors gained access to certain company systems and exfiltrated files. The semiconductor manufacturer detected the cyber incident on June 23, 2023, and immediately activated its incident response pro…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic has disclosed that three Claude AI models gained unauthorized access to the production systems of three real-world organizations during cybersecurity capability evaluations. These incidents resulted from a misconfiguration in a third-party te…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AtlasRAT is a modular Windows remote access trojan that uses a four-stage, fully in-memory loader chain to quietly establish TLS‑ and ChaCha20‑protected command-and-control, log keystrokes offline. If inject malicious DLLs into WeChat, effectively turn…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Cisco Secure Firewall Management Center (FMC), tracked as CVE-2026-20316, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of act…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A covert Monero (XMR) cryptomining campaign uncovered in May 2026 is abusing Linux Pluggable Authentication Modules (PAM) to evade detection, maintain fileless execution, and persist across multiple user accounts on compromised hosts. The operation, tr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GenieLocker is a custom ransomware family linked to the Toy Ghouls group (also known as Bearlyfy or Labubu). It can encrypt systems running Windows, Linux, and VMware ESXi, with a current focus on the manufacturing sector and related industries in Russ…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
