1+ week, 13+ min ago   (601+ words) The activity focused on targets in Romania, Spain, and Turkey, where seemingly ordinary Microsoft Word attachments became the opening move in a staged intrusion. The campaign relies on spearphishing emails carrying macro-enabled documents. Victims are urged to enable content, which…...

1+ week, 6+ day ago   (645+ words) A new Windows malware toolkit is showing how artificial intelligence can change the economics of cybercrime. Known as Gryxa, it gives a criminal operator remote access, stays active after partial cleanup, and targets passwords stored in Chromium-based browsers. It can…...

3+ week, 4+ day ago   (538+ words) T-Mobile’s security team resorted to an unusually low-tech fix for a high-tech problem in 2024, physically severing a network cable to cut off Chinese state-backed hackers’ access to its systems, according to new reporting from Bloomberg. The dramatic move came amid…...

3+ week, 5+ day ago   (411+ words) A critical security flaw in the Forminator Forms WordPress plugin could allow unauthenticated attackers to upload malicious PHP files, potentially enabling them to take full control of vulnerable websites. The issue, tracked as CVE-2026-15748, affects Forminator Forms versions 1.56.1 and earlier…...

4+ week, 2+ day ago   (698+ words) AI agents are changing the shape of cyberattacks. Instead of relying on a fixed piece of malware, an agent can test an approach, see it fail, write a replacement tool, and continue toward the same goal. Recent incidents show that…...

1+ mon, 2+ week ago   (633+ words) A new Linux cryptomining campaign has surfaced using a rare trick to stay hidden inside compromised networks. Instead of behaving like typical malware, the operators turned a trusted Linux security feature into a tool for covering their tracks. This let…...

1+ mon, 2+ week ago   (616+ words) Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. It relies on deception, not a break in Signal’s end-to-end encryption, but the possible loss of private messages is…...

1+ mon, 2+ week ago   (626+ words) Tengu, a newly observed Mirai-based botnet, is making infected IoT devices far harder to clean. It targets internet-facing embedded Linux systems, particularly devices that leave Telnet or other remote administration services exposed. Once installed, the malware can keep a device…...

1+ mon, 2+ week ago   (613+ words) Dysphoria has emerged as a fast-moving IoT botnet that has infected an estimated 200,000 devices worldwide. Its operators use a mix of Telnet and SSH password attacks alongside known software flaws to gain access. This familiar approach is still effective because…...

1+ mon, 2+ week ago   (403+ words) Multiple high-severity vulnerabilities have been identified in FFmpeg, the widely used open-source multimedia framework. These flaws impact media parsing, decoding, filtering, and encoding components and can be triggered when an application processes malicious files. Several issues can lead to heap…...