A sophisticated malware campaign dubbed “Weedhack” is actively targeting Minecraft players through malicious YouTube videos promoting fake game cheats and hacks. The operation delivers CountLoader malware, which has infected over 86,000 systems, subsequently deploying cryptocurrency miners and infor
Cybercriminals have developed sophisticated WordPress malware that conceals command-and-control (C2) communications within Steam gaming platform profile comments. This novel obfuscation technique exploits Steam’s legitimate infrastructure to evade detection by security tools, allowing attackers to m
A critical command injection vulnerability has been discovered in multiple TP-Link router models, allowing unauthenticated attackers to execute arbitrary system commands remotely. The flaw, affecting widely deployed consumer and small business routers, stems from improper input validation in the web
PHANTOMPULSE, a newly discovered Remote Access Trojan (RAT), is actively compromising Windows systems through sophisticated process injection techniques and User Account Control (UAC) bypass methods. The malware employs multi-stage injection, reflective DLL loading, and legitimate process hollowing
The Pakistan-linked APT group SideCopy has launched a targeted cyber espionage operation against Afghanistan’s Ministry of Finance using Xeno RAT, an open-source remote access trojan. The attack leverages weaponized documents and multi-stage infection chains to establish persistent access for intell
Former Mesa County Clerk Tina Peters was convicted for her role in a significant election security breach that exposed sensitive voting system data. Despite facing legal consequences, Peters maintains her defiance and announces plans to continue fighting the charges. The case highlights critical vul
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Oracle WebLogic Server deserialization vulnerability (CVE-2020-14882) to its Known Exploited Vulnerabilities (KEV) catalog. This remote code execution flaw, originally patched in October 2020, is now being actively
A sophisticated campaign is targeting Signal messenger users by stealing their encrypted backup files and attempting to crack the passphrases offline. Attackers are using social engineering, malware distribution, and cloud storage compromise to access Signal backups stored on victims’ devices or clo
A critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks’ PAN-OS GlobalProtect gateway is being actively exploited in the wild. The flaw allows unauthenticated attackers to bypass authentication mechanisms and gain unauthorized access to protected networks. Organizations
A lone threat actor successfully published 14 malicious npm packages designed to impersonate legitimate OpenSearch and Elasticsearch libraries. These typosquatting packages contained credential-harvesting code that targeted developers’ authentication tokens and environment variables. The malicious l