-
A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task Scheduler service and executes subsequent payloads with LocalSystem privileges. The executable acts as an NRV2E-c…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy services. Disclosed on October 8, the operation affected thousands of devices across more than 150 …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn. This vulnerability allows remote command execution before the user approves desktop control. Because the AnyDesk service typically runs…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An advanced persistent threat spear-phishing campaign targeting individuals affiliated with Taiwanese research organizations, combining likely AI-assisted event invitations with real-time Google authentication interception. Tracked as UAT-11985, the op…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Casbaneiro banking trojan campaign in August 2026 that targeted Latin American users via phishing emails and malicious PDFs disguised as invoices and legal notices. Its defining feature is conditional command-and-control activation: the malware initi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft is enhancing Teams security with a new feature that detects malicious URLs hidden in QR codes and alerts recipients after they receive messages. This improvement extends the protections offered by Microsoft Defender for Office 365, combining …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
REA, short for Reverse Engineer Anything, connects AI coding agents to reverse-engineering tools, enabling in-depth analysis of native binaries, applications, and runtime behavior. This open-source project supports Ghidra, Hopper, and IDA as native ana…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ransomware operators are actively exploiting CVE-2026-0257, an authentication bypass vulnerability affecting Palo Alto Networks PAN-OS GlobalProtect and Prisma Access. It lets them establish unauthorized VPN sessions and infiltrate internal networks. R…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers abused Microsoft Power BI to deliver unauthorized ScreenConnect remote monitoring and management (RMM) clients, using trusted Microsoft infrastructure to disguise phishing links and establish persistent access. Huntress observed the campaign …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic revealed that its Claude models had exploited SQL and command injection vulnerabilities, submitted unauthorized forms, and bypassed access restrictions during evaluations and internal use. The company said these incidents had minimal real-wor…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
