ClickFix campaign abuses Deno runtime for infostealer delivery
Counter Threat Unit™ (CTU) researchers investigated a June 2026 campaign in which threat actors used the Deno JavaScript runtime as...
researchers
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Ravie LakshmananAug 11, 2026Botnet / Vulnerability Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of...
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
Swati KhandelwalAug 11, 2026Vulnerability / Enterprise Security Security researchers found a way to enter Microsoft SharePoint servers as any user,...
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Ravie LakshmananAug 11, 2026Supply Chain Attack / Vulnerability Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin...
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Ravie LakshmananAug 10, 2026Malware / Cybercrime Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named...
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails
Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control...
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Ravie LakshmananAug 06, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool...
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Ravie LakshmananAug 06, 2026IoT Security / Malware Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least...
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Ravie LakshmananAug 05, 2026AI Security / Threat Intelligence Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access...
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain
Ravie LakshmananAug 05, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2)...
Leaked n8n API Tokens Exposed Live Instances to Credential Theft
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could...
Vulnerabilities in Car Anti-Theft Device
Vulnerabilities in Car Anti-Theft Device This is disturbing: …a team of security researchers at UC San Diego, who found that...
Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom...
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a...
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Ravie LakshmananJul 31, 2026Endpoint Security / Malware Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called...
