ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories
Ravie LakshmananFeb 05, 2026Cybersecurity / Hacking News This week didn’t produce one big headline. It produced many small signals —...
hacking
China-linked Amaranth-Dragon hackers target Southeast Asian governments in 2025
China-linked Amaranth-Dragon hackers target Southeast Asian governments in 2025 Pierluigi Paganini February 05, 2026 China-linked hackers tracked as Amaranth-Dragon targeted...
CVE-2025-22225 in VMware ESXi now used in active ransomware attacks
CVE-2025-22225 in VMware ESXi now used in active ransomware attacks Pierluigi Paganini February 04, 2026 Ransomware groups now exploit VMware...
Taiwanese operator of Incognito Market sentenced to 30 years over $105M darknet drug ring
Taiwanese operator of Incognito Market sentenced to 30 years over $105M darknet drug ring Pierluigi Paganini February 04, 2026 A...
Paris raid on X focuses on child abuse material allegations
Paris raid on X focuses on child abuse material allegations Pierluigi Paganini February 04, 2026 French prosecutors raided X offices...
GreyNoise tracks massive Citrix Gateway recon using 63K+ residential proxies and AWS
GreyNoise tracks massive Citrix Gateway recon using 63K+ residential proxies and AWS Pierluigi Paganini February 04, 2026 GreyNoise spotted a...
Microsoft: Info-Stealing malware expands from Windows to macOS
Microsoft: Info-Stealing malware expands from Windows to macOS Pierluigi Paganini February 04, 2026 Microsoft warns info-stealing attacks are expanding from...
U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February...
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure Pierluigi Paganini February 03, 2026 Hackers exploit...
APT28 exploits Microsoft Office flaw in Operation Neusploit
APT28 exploits Microsoft Office flaw in Operation Neusploit Pierluigi Paganini February 03, 2026 Russia-linked APT28 is behind Operation Neusploit, exploiting...
Notepad++ infrastructure hack likely tied to China-nexus APT Lotus Blossom
Notepad++ infrastructure hack likely tied to China-nexus APT Lotus Blossom Pierluigi Paganini February 03, 2026 Rapid7 researchers say the Notepad++...
MoltBot Skills exploited to distribute 400+ malware packages in days
MoltBot Skills exploited to distribute 400+ malware packages in days Pierluigi Paganini February 02, 2026 Over 400 malicious OpenClaw packages...
Panera Bread breach affected 5.1 Million accounts, HIBP Confirms
Panera Bread breach affected 5.1 Million accounts, HIBP Confirms Pierluigi Paganini February 02, 2026 Have I Been Pwned says Panera...
Hackers exploit unsecured MongoDB instances to wipe data and demand ransom
Hackers exploit unsecured MongoDB instances to wipe data and demand ransom Pierluigi Paganini February 02, 2026 Over 1,400 exposed MongoDB...
Nation-state hack exploited hosting infrastructure to hijack Notepad++ updates
Nation-state hack exploited hosting infrastructure to hijack Notepad++ updates Pierluigi Paganini February 02, 2026 Notepad++ maintainer says nation-state attackers hijacked...