1+ mon, 3+ week ago   (444+ words) A newly identified Windows malware sample that abuses Microsoft Graph API to transform a compromised Microsoft 365 calendar into a covert two-way command and control (C2) channel. Researchers at Group-IB dubbed the highly sophisticated malware sample HollowGraph and attributed it, with high…...

1+ mon, 4+ week ago   (435+ words) A new macOS stealer has been observed pairing the paste-a-command social engineering of a ClickFix lure with a coercion routine that rendered the machine unusable until the victim surrendered their password. According to new research from Group-IB published on June…...

1+ mon, 4+ week ago   (461+ words) A six-month phishing operation has been tricking Windows and macOS users into installing legitimate remote monitoring and management (RMM) software through fake electronic greeting cards (eCards). According to new research published by Forescout on July 14, the campaign, which it dubbed…...

2+ mon, 3+ day ago   (304+ words) A new multi-purpose backdoor recently discovered by Microsoft marks a dangerous shift toward unified cyber-attack frameworks. The backdoor, tracked as GigaWiper, is linked to a malware implant with extensive operational capabilities, allowing cyber threat actors to conduct both quiet espionage…...

2+ mon, 1+ week ago   (418+ words) A critical authentication bypass in SimpleHelp's remote monitoring and management (RMM) software has been exploited to deliver two previously unseen malware families, after attackers forged a login token to seize control of a managed network. New analysis from security firm…...

2+ mon, 3+ week ago   (467+ words) A cryptocurrency-stealing malware campaign has been spreading by faking its own popularity, dressing up booby-trapped "tools" with bogus GitHub stars, inflated download counts and AI-narrated YouTube tutorials. New analysis from Check Point Research traced the operation to a Rust-based clipboard…...

2+ mon, 3+ week ago   (397+ words) A North Korean scheme to plant fake IT workers inside Western companies has been exposed from the inside, after one of its operatives tried to infiltrate the very firm that tracks the fraud. Risk intelligence provider Nisos recently detailed how…...

4+ mon, 2+ week ago   (453+ words) Security researchers have identified malware dating back to 2005 that appears to have been designed to disrupt Iran’s nuclear program years before the infamous Stuxnet campaign. SentinelOne’s Vitaly Kamluk and Juan Andrés Guerrero-Saade explained in a blog post that their starting…...

4+ mon, 3+ week ago   (371+ words) A multi-national law enforcement operation has resulted in the takedown of 53 domains associated with Distributed Denial of Service (DDoS) attacks and the arrest of four people suspected of providing DDoS-for-hire services. Operation PowerOff saw police and cybersecurity agencies from 21 countries…...

5+ mon, 6+ day ago   (350+ words) Fortinet customers have been urged to update their FortiClient Enterprise Management Server (EMS) products after the vendor was forced to issue an emergency patch over the weekend. CVE-2026-35616 is a critical (CVSS 9.1) improper access control vulnerability which could allow an…...