Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks

Despite Internet Explorer’s retirement, hackers are abusing the legacy MSHTA utility in stealthy fileless malware attacks targeting Windows users.

·

Cyber Attack, cybersecurity, Fileless, LOLBIN, Malware, Microsoft, MSHTA, Security, vulnerability

¶¶¶¶¶

GitHub Breach: TeamPCP Steals 3,800 Repositories via VS Code Extension

GitHub Breach: TeamPCP stole 3,800 internal repositories through a malicious VS Code extension and is now selling the data online for $95,000.

·

Cyber Attack, Cyber Crime, cybersecurity, Data Breach, Data Breaches, Extension, GitHub, Security, TeamPCP, VS Code

¶¶¶¶¶

Verizon DBIR: AI Helped Hackers Exploit Vulnerabilities in 31% of Recent Breaches

Verizon DBIR 2026 reveals software vulnerabilities overtook stolen passwords in cyberattacks, with AI helping hackers exploit flaws within hours.

·

AI, Artificial Intelligence, Cyber Attack, Cyber Crime, cybersecurity, Data Breaches, Security, Verizon, Verizon DBIR, vulnerability

¶¶¶¶¶

Fake Word Phishing Reveals Enterprise Blind Spot in Trusted Remote Access Tools

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

·

ANY.RUN, cybersecurity, Malware, Microsoft Word, Phishing, Phishing Scam, Security, SOC, Threat Intelligence

¶¶¶¶¶

Banana RAT Malware in Fake Invoices Hits Customers at 16 Brazilian Banks

Banana RAT malware hidden in fake invoices and security update screens targets customers at 16 Brazilian banks stealing data with QR fraud.

·

Banana RAT, Brazil, Cyber Crime, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

AI Agent Security: Automating Workflow Without Creating Prompt Injection or Data Leak Risks

AI agent security starts with a simple fact: the more authority an agent has, the tighter its access…

·

Agentic AI, AI, AI Agents, Artificial Intelligence, Automation, cybersecurity, data leak, Prompt Injection, Security

¶¶¶¶¶

Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts

Cybersecurity researchers successfully demonstrated 47 unique zero-day exploits at Pwn2Own Berlin 2026, targeting major enterprise software and AI platforms.

·

0day, AI, Bug Bounty, hacking, Pwn2Own, Security, vulnerability, ZDI

¶¶¶¶¶

Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products

Hackers are actively exploiting the Nginx Rift vulnerability affecting NGINX and F5 products, exposing servers to denial-of-service attacks.

·

Cyber Attack, cybersecurity, F5, NGINX, Security, VulnCheck, vulnerability

¶¶¶¶¶

10 Top OSINT Tools Every Investigator Should Know in 2026

Modern OSINT platforms rely more on AI and automation, while older social tracking methods keep losing access due to privacy and API restrictions.

·

cybersecurity, OSINT, Security, Technology, Threat Intelligence

¶¶¶¶¶

New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords

The newly discovered Reaper malware bypasses Apple’s macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor.

·

AMOS, Apple, Atomic Stealer, Cyber Attack, cybersecurity, macOS, Malware, Reaper, Security

¶¶¶¶¶

1010.cx

1010.cx

Category: Security