News about viruses, Ransomware, Trojans and other malicious software
Symantec and Zscaler have detected a new back door, baptized as Mistic (or MTLBackdoor) which is being employed in economically motivated intrusions for sectors such as insurance,…
The recent seizure by the Department of Justice of a cloud account linked to subsidiaries of the HuiOne conglomerate and the simultaneous sanctions of the Treasury to related netw…
A high-gravity SSRF in Cisco Unified Communications Manager (CUCM), identified as CVE-2026-20230, is being actively exploited and represents a direct risk for voice and collaborat…
A Russian-speaking initial access operator, motivated by economic benefit, is behind a massive credentials collection campaign that researchers have baptized as FortiBleed and wou…
An active campaign is taking advantage of WhatsApp's direct messages to distribute malicious files in VBScript format that end up installing legitimate remote monitoring software …
A malicious campaign spread by WhatsApp is using camouflaged VBScript files as invoices and financial documents to deliver persistent remote access to Windows equipment: when you …
A sophisticated attack on the MEV bot known as JaredFromSubway left a hole of approximately $15 million after a malicious actor exploited the logic that the bot uses to detect tra…
The recent intrusion that affected several plugins Pro of the developer ShapedPlugin illustrates with crudely the risk most feared by the WordPress community: a commitment of the …
Security researchers have identified a chain of failures in Dify, an open-source platform for agent workflows and more than 146,000 stars in GitHub, which allowed for silently exf…
