Russia-linked APT group Turla has been observed deploying a previously undocumented backdoor called STOCKSTAY in targeted espionage operations against Ukrainian entities. The sophisticated campaign leverages compromised infrastructure to establish persistent access, with the malware demonstrating ad
Microsoft has announced the extension of hotpatching support for Windows Server 2022 on Azure through 2027, providing organizations with continuous security updates that don’t require system reboots. This extension ensures businesses can maintain operational continuity while staying protected agains
The U.S. Department of Justice has seized over 400 domains allegedly used to illegally stream FIFA World Cup content, marking one of the largest anti-piracy enforcement actions in recent years. This coordinated operation targeted websites providing unauthorized access to premium sports content, high
Millenium RAT, a sophisticated remote access trojan rewritten in C++, has compromised over 62,000 devices across 160 countries in an accelerating global campaign. The malware features advanced persistence mechanisms, credential harvesting capabilities, and keylogging functionality. Attackers are dis
Microsoft has purged 119 malicious browser extensions from the Edge Add-ons store following the discovery of a sophisticated malware campaign dubbed “StegoAd.” The extensions used steganography to conceal malicious code within seemingly innocent image files and custom fonts, enabling attackers to in
Bluekit, a sophisticated Phishing-as-a-Service (PHaaS) platform, leverages browser-in-the-middle (BitM) attacks to intercept authentication sessions and bypass multi-factor authentication (MFA) protections. Operating as a commercial service, Bluekit provides cybercriminals with turnkey phishing infr
A critical vulnerability (CVE-2026-55200) in libssh2, a widely-used SSH client library, has been publicly disclosed with a working proof-of-concept exploit available. The flaw allows malicious SSH servers to execute arbitrary code on connecting clients through memory corruption during the SSH handsh
Threat actors have compromised legitimate npm and Go packages to deliver a sophisticated Python-based infostealer that exploits Visual Studio Code’s task automation system. The malware hijacks VS Code’s tasks.json configuration to execute malicious payloads silently when developers open infected pro
Chinese AI company Zhipu AI has released GLM-5.2, claiming performance comparable to Anthropic’s Claude in identifying security vulnerabilities. This development signals a significant shift in the AI-powered security landscape, as state-backed Chinese models potentially match Western capabilities in
Japanese telecommunications giant KDDI Corporation disclosed a massive data breach affecting up to 14.2 million email login credentials across six internet service providers. The incident, which originated from unauthorized access to KDDI’s email infrastructure, exposed usernames and passwords store