News about viruses, Ransomware, Trojans and other malicious software
A package supply campaign has recently compromised legitimate components used by developers and continuous integration pipelines to distribute a malicious multiplatform tool. The …
The cyber extortion group known as ShinyHunters published this week on the dark network that has violated systems of the U.S. Federal Bureau of Research (FBI) and has obtained dat…
On September 17 WordPress published a patch that fixes a vulnerability in the core - registered as CVE-2026-93485 and baptized by the community as "Commentary 2Shell" - which allo…
LastPass and Delphos Labs researchers have documented a suplanting campaign that offered a false installer of the "LastPass Authenticator" in GitHub. If a victim downloaded and ex…
Security investigators have detailed a new campaign, identified as TASK # STOMP, which uses VBScript and PowerShell to install a backdoor that collects and exfilters business docu…
An intrusion campaign attributed to the North Korean group known as Jade Sleet again exposed how state actors prioritize developers and development environments to gain access to …
Three researchers at the Hacktron firm demonstrated that a vulnerability in the processing of images on the OpenAI public forum platform could be chained to a failure in the compa…
Security investigators have identified a chain of attack associated with the online person known as Handala Hack and a set of tools using Telegram as a command and control channel…
The U.S. Department of Justice announced this week the seizure, by court order, of the web pages linked to the DDoS attack service on request known as NightmareStresser. The addre…
