Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

August 26, 2026 at 09:05PM Cybersecurity researchers have discovered additional infrastructure and previously undocumented malwar…

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

August 26, 2026 at 12:42PM An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEE…

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

August 26, 2026 at 11:17AM Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to …

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

August 25, 2026 at 11:47PM The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of w…

Frontier AI: Vulnerability Management's Systemic Revolution

August 25, 2026 at 04:44PM Vulnerability management has been a staple of security programs since the dawn of the cybersecurity di…

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

August 25, 2026 at 02:04PM Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurif…

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

August 25, 2026 at 11:42AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity se…

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

August 24, 2026 at 11:11PM Cybersecurity researchers have found that several websites are still actively distributing a malware f…

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

August 24, 2026 at 05:00PM Big security risks come in small packages. While enterprise security teams focus on policing the proli…

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

August 24, 2026 at 01:38PM Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-101…

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

August 22, 2026 at 08:02PM The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 mil…

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

August 22, 2026 at 12:23AM Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working …