New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite...
access
New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS
Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that's capable of targeting Windows, Linux, and...
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
Ravie LakshmananJul 01, 2026Malware / SEO Poisoning Unknown threat actors are leveraging the ScreenConnect remote access tool as a way...
AI-Driven Identity Attacks Are Surging, PwC Warns
Identity and social engineering scams have been a time-honored way to gain unauthorized access to systems. Cybercriminals typically use email...
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns
Ravie LakshmananJun 25, 2026Initial Access Broker / Ransomware A new, stealthy backdoor named Mistic has been deployed as part of...
FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation
Ravie LakshmananJun 23, 2026Initial Access Broker / Firewall Security A Russian-speaking initial access broker (IAB) driven by financial gain is...
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Pierluigi Paganini June 08, 2026 Hackers exploit CVE-2026-3300 in Everest...
New GitHub Zero-Day Exposed Developer Tokens to Attackers
A single click on the wrong repository could have put a developer’s GitHub access at risk. Security researcher Ammar Askar...
BTMOB: A stealthy RAT burrowing deep into Android devices
The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise Daniel Cunha Barbosa...
Lazarus APT unveils fileless remote access Trojan designed to evade detection
Lazarus APT unveils fileless remote access Trojan designed to evade detection Pierluigi Paganini May 26, 2026 North Korea-linked Lazarus APT...
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do -...
GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP...
Grafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft
Grafana has confirmed that an unauthorized party gained access to its GitHub environment after obtaining a compromised token, allowing the...
Zero-Day Exploit Against Windows BitLocker
Zero-Day Exploit Against Windows BitLocker It’s nasty, but it requires physical access to the computer: The exploit, named YellowKey, was...
Apple’s iPhone Privacy Feature Expands to More Users Worldwide
Apple is widening access to its iPhone location privacy tool, bringing tighter control over user data to far more carriers...
