Banana RAT Malware Targets 16 Brazilian Banks via Invoices
Banana RAT malware spreads through fake invoices targeting 16 Brazilian banks. QR code fraud drains accounts while victims think they’re paying bills.
May 2026
Read More
Cyber Breaches Meet Wall Street Trading Strategies
Cyber Breaches Meet Wall Street Trading Strategies
Gremlin Stealer Evolves With Advanced Obfuscation Tactics
Gremlin Stealer malware has evolved with sophisticated obfuscation techniques, embedding malicious payloads in resource files to bypass security tools. The new variant targets credentials, cryptocurrency wallets, and browser data while evading traditional detection methods through multi-stage execution and living-off-the-land tactics. A sophisticated evolution of the Gremlin information stealer has emerged, employing advanced obfuscation tactics that…
Microsoft Shares Mitigation For YellowKey Windows Zero-Day
Microsoft races to patch YellowKey zero-day that breaks BitLocker encryption. Attackers can now access protected drives. Apply mitigations immediately.
Critical NGINX Flaw Enables Remote Code Execution
Critical NGINX vulnerability CVE-2026-8711 lets remote attackers execute malicious code via heap overflow. Unauthenticated exploitation possible. Patch now.
Pwn2Own Berlin 2026 Awards $1.3M For 47 Zero-Days
Pwn2Own Berlin 2026 wraps up: $1.3M paid out for 47 zero-days. DEVCORE takes Master of Pwn with $505K. Three intense days of enterprise exploits.
Discord Rolls Out End-to-End Encryption For All Calls
Discord just rolled out end-to-end encryption for ALL voice and video calls by default. Your conversations just got a whole lot more private.
Drupal Issues Emergency Security Update For May 20
Drupal drops emergency security update May 20. If you’re running a Drupal site, clear your calendar. The wording alone should have admins on high alert.
Americans Lost $388M To Crypto ATM Scams In 2025
Americans lost $388M to crypto ATM scams in 2025. Criminals are weaponizing Bitcoin kiosks to drain victims’ accounts. Know the red flags before you use one.
How XSS Turns Passkeys Into a Backdoor
A single XSS vulnerability can silently register an attacker-controlled passkey on a victim’s account, creating a persistent authentication backdoor with zero user interaction. The widespread deployment of passkeys without attestation requirements makes this a critical and largely overlooked threat.