New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS

July 6, 2026 at 01:43PM Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that…

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

July 6, 2026 at 12:03PM Scanners meant to catch malicious add-on "skills" for AI coding agents can be fooled by a few s…

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

July 4, 2026 at 04:47PM The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing …

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

July 4, 2026 at 01:49AM Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets …

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

July 4, 2026 at 01:10AM A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no speci…

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

July 4, 2026 at 12:25AM Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed A…

European Parliament Member Investigating Spyware Was Hacked With Pegasus

July 3, 2026 at 04:35PM A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Koul…

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

July 3, 2026 at 01:33PM Cybersecurity researchers have flagged a new macOS information stealer called PamStealer that employs a s…

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

July 3, 2026 at 12:00AM Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bl…

19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges

July 2, 2026 at 12:58AM A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finland to…

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

July 1, 2026 at 10:48PM Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social e…

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

July 1, 2026 at 11:02AM ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New…