Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
Ravie LakshmananJul 28, 2026Malware / Cyber Espionage The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten,...
tracked
Chaos in Teams vishing
Sophos analysts investigated a Microsoft Teams voice phishing (vishing) campaign tracked as STAC4749 that used a consistent set of IT-themed...
Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
Swati KhandelwalJul 27, 2026Botnet / IoT Security Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab,...
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite...
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
Ravie LakshmananJul 08, 2026Malware / Network Security A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware...
North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware...
French aircraft carrier Charles de Gaulle tracked via Strava activity in OPSEC failure
French aircraft carrier Charles de Gaulle tracked via Strava activity in OPSEC failure Pierluigi Paganini March 20, 2026 A French...
APT28 Targeted European Entities Using Webhook-Based Macro Malware
Ravie LakshmananFeb 23, 2026Malware / Threat Intelligence The Russia-linked state-sponsored threat actor tracked as APT28 has been attributed to a...