Malware & Threats

80 материалов

• TrueConf Zero-Day Exploited in Asian Government Attacks

  Vulnerabilities

  A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads. The post TrueConf Zero-Day Exploited in Asian Government Attacks appeared first on SecurityWeek.

• In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware

  Malware & Threats

  Other noteworthy stories that might have slipped under the radar: Symantec vulnerability, anti-ClickFix mechanism added to macOS, FBI hack classified as major incident. The post In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware appeared first on SecurityWeek.

• Critical ShareFile Flaws Lead to Unauthenticated RCE

  Vulnerabilities

  The vulnerabilities can be chained together to bypass authentication and upload arbitrary files to the server. The post Critical ShareFile Flaws Lead to Unauthenticated RCE appeared first on SecurityWeek.

• React2Shell Exploited in Large-Scale Credential Harvesting Campaign

  Malware & Threats

  Using automated scanning and the Nexus Listener collection framework, the hackers compromised over 750 systems. The post React2Shell Exploited in Large-Scale Credential Harvesting Campaign appeared first on SecurityWeek.

• T-Mobile Sets the Record Straight on Latest Data Breach Filing

  Data Breaches

  The cybersecurity incident involved an insider and had a limited impact, the telecoms giant told SecurityWeek. The post T-Mobile Sets the Record Straight on Latest Data Breach Filing appeared first on SecurityWeek.

• North Korean Hackers Drain $285 Million From Drift in 10 Seconds

  Cybercrime

  The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults. The post North Korean Hackers Drain $285 Million From Drift in 10 Seconds appeared first on SecurityWeek.

• Critical Vulnerability in Claude Code Emerges Days After Source Leak

  Artificial Intelligence · Vulnerabilities

  Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found by Adversa AI. The post Critical Vulnerability in Claude Code Emerges Days After Source Leak appeared first on SecurityWeek.

• Apple Rolls Out DarkSword Exploit Protection to More Devices

  Mobile & Wireless · Vulnerabilities

  The DarkSword exploit kit has been used by both state-sponsored hackers and commercial spyware vendors. The post Apple Rolls Out DarkSword Exploit Protection to More Devices appeared first on SecurityWeek.

• Cisco Patches Critical and High-Severity Vulnerabilities

  Vulnerabilities

  The bugs could lead to authentication bypass, remote code execution, information disclosure, and privilege escalation. The post Cisco Patches Critical and High-Severity Vulnerabilities appeared first on SecurityWeek.

• 250,000 Affected by Data Breach at Nacogdoches Memorial Hospital

  Data Breaches

  In January 2026, a threat actor hacked the hospital’s internal network and stole personal and health information. The post 250,000 Affected by Data Breach at Nacogdoches Memorial Hospital appeared first on SecurityWeek.

• Toy Giant Hasbro Hit by Cyberattack

  Cybercrime

  The company is investigating the full scope of the incident, including whether any files have been compromised.

• Sophisticated CrystalX RAT Emerges

  Malware & Threats

  The malware can spy on victims, steal their information, and make configuration changes on devices. The post Sophisticated CrystalX RAT Emerges appeared first on SecurityWeek.

• Toy Giant Hasbro Hit by Cyberattack

  Cybercrime

  The company is investigating the full scope of the incident, including whether any files have been compromised. The post Toy Giant Hasbro Hit by Cyberattack appeared first on SecurityWeek.

• New DeepLoad Malware Dropped in ClickFix Attacks

  Malware & Threats

  The malware steals credentials, installs a malicious browser extension, and can spread via USB drives. The post New DeepLoad Malware Dropped in ClickFix Attacks appeared first on SecurityWeek.

• Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome

  Vulnerabilities

  Google has announced fixes for CVE-2026-5281, a zero-day affecting Chrome’s Dawn component. The post Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome appeared first on SecurityWeek.

• US Charges Uranium Crypto Exchange Hacker

  Cybercrime

  Jonathan Spalletta exploited smart contract vulnerabilities to steal approximately $55 million in cryptocurrency and cause Uranium to shut down. The post US Charges Uranium Crypto Exchange Hacker appeared first on SecurityWeek.

• Stolen Logins Are Fueling Everything From Ransomware to Nation-State Cyberattacks

  Identity & Access · Cybercrime

  Report shows how industrialized credential theft underpins ransomware, SaaS breaches, and geopolitical attacks, shifting security focus from prevention to detecting misuse of legitimate access. The post Stolen Logins Are Fueling Everything From Ransomware to Nation-State Cyberattacks appeared first on SecurityWeek.

• Venom Stealer Raises Stakes With Continuous Credential Harvesting

  Malware & Threats

  Licensed malware with built-in persistence and automation enables attackers to continuously siphon credentials, session data, and cryptocurrency assets. The post Venom Stealer Raises Stakes With Continuous Credential Harvesting appeared first on SecurityWeek.

• Exploitation of Critical Fortinet FortiClient EMS Flaw Begins

  Vulnerabilities

  The SQL injection vulnerability allows unauthenticated attackers to execute arbitrary code remotely, via crafted HTTP requests. The post Exploitation of Critical Fortinet FortiClient EMS Flaw Begins appeared first on SecurityWeek.

• StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs

  Vulnerabilities

  Remotely exploitable, the integer underflow vulnerability impacts StrongSwan releases spanning 15 years. The post StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs appeared first on SecurityWeek.

• Lloyds Data Security Incident Impacts 450,000 Individuals

  Data Breaches

  A faulty software update led to the exposure of mobile banking users’ transactions to other users of the application. The post Lloyds Data Security Incident Impacts 450,000 Individuals appeared first on SecurityWeek.

• Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise

  Artificial Intelligence · Vulnerabilities

  Researchers found an OpenAI Codex vulnerability that could have been exploited to compromise GitHub tokens. The post Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise appeared first on SecurityWeek.

• Healthcare IT Platform CareCloud Probing Potential Data Breach

  Data Breaches

  The company has disclosed a cybersecurity incident involving one of its electronic health record environments. The post Healthcare IT Platform CareCloud Probing Potential Data Breach appeared first on SecurityWeek.

• Russian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

  Nation-State · Mobile & Wireless

  The state-sponsored group’s campaign has targeted government, higher education, financial, and legal entities, as well as think tanks. The post Russian APT Star Blizzard Adopts DarkSword iOS Exploit Kit appeared first on SecurityWeek.

• European Commission Reports Cyber Intrusion and Data Theft

  Data Breaches

  The ShinyHunters hacker group claimed to have stolen over 350GB of information from European Commission cloud systems. The post European Commission Reports Cyber Intrusion and Data Theft appeared first on SecurityWeek.

• Hacked Hospitals, Hidden Spyware: Iran Conflict Shows How Digital Fight Is Ingrained in Warfare

  Nation-State · Cyberwarfare

  Iran-linked hacking groups are turning to high-volume, low-impact cyberattacks, and AI is providing a boost. The post Hacked Hospitals, Hidden Spyware: Iran Conflict Shows How Digital Fight Is Ingrained in Warfare appeared first on SecurityWeek.

• Telnyx Targeted in Growing TeamPCP Supply Chain Attack

  Supply Chain Security · Malware & Threats

  Two malicious versions of the popular SDK were uploaded to the PyPI registry, targeting Windows, macOS, and Linux. The post Telnyx Targeted in Growing TeamPCP Supply Chain Attack appeared first on SecurityWeek.

• Exploitation of Fresh Citrix NetScaler Vulnerability Begins

  Vulnerabilities

  The critical-severity flaw leaks application memory and can be exploited to obtain authenticated administrative session IDs. The post Exploitation of Fresh Citrix NetScaler Vulnerability Begins appeared first on SecurityWeek.

• FBI Confirms Kash Patel Email Hack as US Offers $10M Reward for Hackers

  Nation-State

  The agency said Iranian hackers targeted the director’s personal email account and noted that the compromised information is old. The post FBI Confirms Kash Patel Email Hack as US Offers $10M Reward for Hackers appeared first on SecurityWeek.

• F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild

  Vulnerabilities

  Initially disclosed as a high-severity denial-of-service (DoS), the bug was reclassified as a critical RCE issue. The post F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild appeared first on SecurityWeek.

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

  Malware & Threats

  The infection chain includes a fake CAPTCHA page, a Bash script, a Nuitka loader, and the Python-based infostealer. The post Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs appeared first on SecurityWeek.

• Pro-Iranian Hacking Group Claims Credit for Hack of FBI Director Kash Patel’s Personal Account

  Cybercrime · Cyberwarfare

  The group that it was making available for download emails and other documents from Patel’s account. The post Pro-Iranian Hacking Group Claims Credit for Hack of FBI Director Kash Patel’s Personal Account appeared first on SecurityWeek.

• OpenAI Launches Bug Bounty Program for Abuse and Safety Risks

  Artificial Intelligence · Vulnerabilities

  Through the new program, OpenAI will reward reports covering design or implementation issues leading to material harm. The post OpenAI Launches Bug Bounty Program for Abuse and Safety Risks appeared first on SecurityWeek.

• TP-Link Patches High-Severity Router Vulnerabilities

  Vulnerabilities

  The security defects could be used to bypass authentication, execute arbitrary commands, and decrypt configuration files. The post TP-Link Patches High-Severity Router Vulnerabilities appeared first on SecurityWeek.

• Hightower Holding Data Breach Impacts 130,000

  Data Breaches

  The holdings company says hackers stole names, Social Security numbers, and driver’s license numbers from its environment. The post Hightower Holding Data Breach Impacts 130,000 appeared first on SecurityWeek.

• BIND Updates Patch High-Severity Vulnerabilities

  Vulnerabilities

  Specially crafted domains could be used to cause out-of-memory conditions, leading to memory leaks in the BIND resolvers. The post BIND Updates Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

• Chinese Hackers Caught Deep Within Telecom Backbone Infrastructure

  Nation-State

  The state-sponsored threat actor deployed kernel implants and passive backdoors enabling long-term, high-level espionage. The post Chinese Hackers Caught Deep Within Telecom Backbone Infrastructure appeared first on SecurityWeek.

• Cisco Patches Multiple Vulnerabilities in IOS Software

  Vulnerabilities

  The high- and medium-severity flaws could lead to denial-of-service, secure boot bypass, information disclosure, and privilege escalation. The post Cisco Patches Multiple Vulnerabilities in IOS Software appeared first on SecurityWeek.

• Alleged RedLine Malware Administrator Extradited to US

  Cybercrime · Malware & Threats

  Hambardzum Minasyan of Armenia has been accused of being involved in the development and administration of the infostealer malware. The post Alleged RedLine Malware Administrator Extradited to US appeared first on SecurityWeek.

• Russian Cybercriminal Gets 2-Year Prison Sentence in US

  Ransomware · Cybercrime

  Ilya Angelov was a member of the cybercrime group tracked as TA-551, Shathak, Gold Cabin, Monster Libra, and ATK236. The post Russian Cybercriminal Gets 2-Year Prison Sentence in US appeared first on SecurityWeek.

• iOS, macOS 26.4 Roll Out With Fresh Security Patches

  Endpoint Security · Vulnerabilities

  Apple released security fixes for older devices as well, in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5. The post iOS, macOS 26.4 Roll Out With Fresh Security Patches appeared first on SecurityWeek.

• From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI

  Application Security · Malware & Threats

  The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$. The post From Trivy to Broad OSS Compromise: TeamPCP Hits Docker Hub, VS Code, PyPI appeared first on SecurityWeek.

• US Prisons Russian Access Broker for Aiding Ransomware Attacks

  Ransomware · Cybercrime

  Aleksei Volkov has been sentenced to 81 months in prison for his role in Yanluowang ransomware attacks. The post US Prisons Russian Access Broker for Aiding Ransomware Attacks appeared first on SecurityWeek.

• HackerOne Employee Data Exposed in Massive Navia Breach

  Data Breaches

  The cybersecurity firm said the personal information of hundreds of employees was stolen in the hacker attack targeting Navia. The post HackerOne Employee Data Exposed in Massive Navia Breach appeared first on SecurityWeek.

• Poland Faced a Surge in Cyberattacks in 2025, Including a Major Assault on the Energy Sector

  Cyberwarfare

  The attacks included a destructive infiltration of Poland's energy system in December and was suspected of originating in Russia. The post Poland Faced a Surge in Cyberattacks in 2025, Including a Major Assault on the Energy Sector appeared first on SecurityWeek.

• Extortion Group Claims It Hacked AstraZeneca

  Data Breaches

  The Lapsus$ hackers allegedly compromised internal code repositories, credentials, and employee data. The post Extortion Group Claims It Hacked AstraZeneca appeared first on SecurityWeek.

• Chrome 146 Update Patches High-Severity Vulnerabilities

  Vulnerabilities

  The software refresh fixes eight memory safety bugs affecting seven Chrome components. The post Chrome 146 Update Patches High-Severity Vulnerabilities appeared first on SecurityWeek.

• 3.1 Million Impacted by QualDerm Data Breach

  Data Breaches

  Hackers stole personal, medical, and health insurance information from the company’s internal systems. The post 3.1 Million Impacted by QualDerm Data Breach appeared first on SecurityWeek.

• Iran Built a Vast Camera Network to Control Dissent. Israel Turned It Into a Targeting Tool

  Cyberwarfare

  The role of Israel’s hijacking of Iran’s street cameras in the killing of the country’s supreme leader underscores how surveillance systems are increasingly being targeted by adversaries in wartime. The post Iran Built a Vast Camera Network to Control Dissent. Israel Turned It Into a Targeting Tool appeared first on SecurityWeek.

• Critical Citrix NetScaler Vulnerability Poised for Exploitation, Security Firms Warn

  Vulnerabilities

  An out-of-bounds read vulnerability can be exploited remotely without authentication to read sensitive information from memory. The post Critical Citrix NetScaler Vulnerability Poised for Exploitation, Security Firms Warn appeared first on SecurityWeek.

• Mazda Says Employee, Partner Information Stolen in Cyberattack

  Data Breaches

  The hackers stole internal IDs, names, email addresses, and business partner IDs from an internal management system. The post Mazda Says Employee, Partner Information Stolen in Cyberattack appeared first on SecurityWeek.

• Stryker Says Malicious File Found During Probe Into Iran-Linked Attack

  Malware & Threats

  The FBI has published an alert describing the malware used by Iranian government hackers. The post Stryker Says Malicious File Found During Probe Into Iran-Linked Attack appeared first on SecurityWeek.

• M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds

  Cybercrime

  The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025. The post M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds appeared first on SecurityWeek.

• Chip Services Firm Trio-Tech Says Subsidiary Hit by Ransomware

  Ransomware · Data Breaches

  The semiconductor company says hackers deployed file-encrypting ransomware on the network of a subsidiary in Singapore. The post Chip Services Firm Trio-Tech Says Subsidiary Hit by Ransomware appeared first on SecurityWeek.

• QNAP Patches Four Vulnerabilities Exploited at Pwn2Own

  Vulnerabilities

  The flaws could allow attackers to access sensitive information, execute code, or cause unexpected behavior. The post QNAP Patches Four Vulnerabilities Exploited at Pwn2Own appeared first on SecurityWeek.

• Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability

  Vulnerabilities

  CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild. The post Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability appeared first on SecurityWeek.

• Critical Quest KACE Vulnerability Potentially Exploited in Attacks

  Vulnerabilities

  The vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector. The post Critical Quest KACE Vulnerability Potentially Exploited in Attacks appeared first on SecurityWeek.

• In Other News: New Android Safeguards, Operation Alice, UK Toughens Cyber Reporting

  Cybercrime

  Other noteworthy stories that might have slipped under the radar: vulnerabilities found in KVM devices, Claudy Day Claude vulnerabilities, The Gentlemen ransomware group. The post In Other News: New Android Safeguards, Operation Alice, UK Toughens Cyber Reporting appeared first on SecurityWeek.

• US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites

  Nation-State

  The US has seized several domains used by Handala in cyber-enabled psychological operations. The post US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites appeared first on SecurityWeek.

• Navia Data Breach Impacts 2.7 Million

  Data Breaches

  Between late December 2025 and mid-January 2026, hackers stole personal and health plan information from Navia’s environment. The post Navia Data Breach Impacts 2.7 Million appeared first on SecurityWeek.

• Thousands of Magento Sites Hit in Ongoing Defacement Campaign

  Cybercrime

  The attacks started on February 27 and have targeted e-commerce platforms, global brands, and government services. The post Thousands of Magento Sites Hit in Ongoing Defacement Campaign appeared first on SecurityWeek.

• Critical Langflow Vulnerability Exploited Hours After Public Disclosure

  Artificial Intelligence · Vulnerabilities

  Because attacker-supplied flow data is used in public flows, the bug leads to unauthenticated remote code execution. The post Critical Langflow Vulnerability Exploited Hours After Public Disclosure appeared first on SecurityWeek.

• Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation

  IoT Security · Cybercrime

  The lesser-known JackSkid and Mossad botnets have also been targeted in the operation. The post Aisuru and Kimwolf DDoS Botnets Disrupted in International Operation appeared first on SecurityWeek.

• Critical ScreenConnect Vulnerability Exposes Machine Keys

  Vulnerabilities

  Latest ScreenConnect version adds encrypted storage and management to prevent unauthorized access to machine keys. The post Critical ScreenConnect Vulnerability Exposes Machine Keys appeared first on SecurityWeek.

• Iran Readied Cyberattack Capabilities for Response Prior to Epic Fury

  Threat Intelligence · Cyberwarfare

  Analysis reveals a six-month buildup of Iran-linked cyber infrastructure, including US-based shell companies, designed to weather kinetic strikes and ensure the resilience of its global hacking operations. The post Iran Readied Cyberattack Capabilities for Response Prior to Epic Fury appeared first on SecurityWeek.

• Marquis Data Breach Affects 672,000 Individuals

  Data Breaches

  It was previously estimated that more than 1.6 million people may be affected by the Marquis data breach. The post Marquis Data Breach Affects 672,000 Individuals appeared first on SecurityWeek.

• Security Firm Aura Discloses Data Breach Impacting 900,000 Records

  Data Breaches

  The information was stolen from a marketing tool after an employee fell victim to a targeted phone phishing attack. The post Security Firm Aura Discloses Data Breach Impacting 900,000 Records appeared first on SecurityWeek.

• Russian APT Exploits Zimbra Vulnerability Against Ukraine

  Vulnerabilities · Malware & Threats

  Insufficient sanitization of CSS content within HTML emails leads to inline script execution when the message is opened in a browser. The post Russian APT Exploits Zimbra Vulnerability Against Ukraine appeared first on SecurityWeek.

• CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability

  Vulnerabilities

  The SharePoint remote code execution vulnerability CVE-2026-20963, which Microsoft patched in January, has been exploited in the wild. The post CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability appeared first on SecurityWeek.

• Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks

  Ransomware · Vulnerabilities

  Amazon found evidence that the FMC software vulnerability has been exploited since late January, and found links to Russia. The post Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks appeared first on SecurityWeek.

• ‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors

  Mobile & Wireless · Vulnerabilities

  Targeting six iOS vulnerabilities and leading to full device compromise, the exploit chain is meant for surveillance. The post ‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors appeared first on SecurityWeek.

• Iranian Hackers Likely Used Malware-Stolen Credentials in Stryker Breach

  Malware & Threats

  The medtech giant has been working on restoring systems affected by the cyberattack conducted by the Handala hackers. The post Iranian Hackers Likely Used Malware-Stolen Credentials in Stryker Breach appeared first on SecurityWeek.

• Researcher Discovers 4th WhatsApp View Once Bypass; Meta Won’t Patch

  Vulnerabilities

  Meta does not plan on fixing the vulnerability because it involves the use of a modified client application. The post Researcher Discovers 4th WhatsApp View Once Bypass; Meta Won’t Patch appeared first on SecurityWeek.

• Robotic Surgery Giant Intuitive Discloses Cyberattack

  Data Breaches

  The company says some of its internal business applications were accessed after an employee fell victim to a phishing attack. The post Robotic Surgery Giant Intuitive Discloses Cyberattack appeared first on SecurityWeek.

• 174 Vulnerabilities Targeted by RondoDox Botnet

  Malware & Threats

  The botnet has increased its activity, peaking at 15,000 exploitation attempts per day, and taking a more targeted approach. The post 174 Vulnerabilities Targeted by RondoDox Botnet appeared first on SecurityWeek.

• Google, Meta, Microsoft Among Signatories of Pact to Combat Scams

  Fraud & Identity Theft

  Several major tech and retail companies have signed an industry accord against online scams and fraud. The post Google, Meta, Microsoft Among Signatories of Pact to Combat Scams appeared first on SecurityWeek.

• CISA Flags Year-Old Wing FTP Vulnerability as Exploited

  Vulnerabilities

  Tracked as CVE-2025-47813, the flaw leads to the disclosure of the full local installation path of the application. The post CISA Flags Year-Old Wing FTP Vulnerability as Exploited appeared first on SecurityWeek.

• Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact

  Ransomware · Data Breaches

  Broadcom, Bechtel, Estée Lauder, and Abbott Technologies are the only major companies that have yet to issue a public statement. The post Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact appeared first on SecurityWeek.

• China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation

  Nation-State

  The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months. The post China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation appeared first on SecurityWeek.

• Threat Actor Targeting VPN Users in New Credential Theft Campaign

  Malware & Threats

  Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information. The post Threat Actor Targeting VPN Users in New Credential Theft Campaign appeared first on SecurityWeek.