A newly discovered backdoor dubbed SLEEPWALKER has been found masquerading as a legitimate ESET antivirus agent on Windows systems. This advanced malware remains dormant until activated by a specially crafted network packet, allowing attackers to maintain persistent access while evading detection. T
A recent Microsoft Defender update intended to patch a zero-day vulnerability has inadvertently broken malware scanning functionality across Windows systems worldwide. The August 2024 security update, while addressing a critical exploit, has caused scan failures, incomplete threat detection, and sys
Microsoft’s Threat Intelligence team has uncovered an extensive infrastructure network supporting MacSync, a sophisticated information-stealing malware targeting macOS systems. The research reveals over 30 rotating domains used by threat actors to distribute the stealer, exfiltrate stolen data, and
Threat actors have deployed malicious Visual Studio Code extensions disguised as legitimate Solidity development tools to steal cryptocurrency wallets, API keys, and developer credentials. The “Solidity Pro” extension and related variants were available on the official VS Code Marketplace, targeting
Anthropic’s Claude Code sessions automatically establish reverse SSH tunnels and install LaunchAgent persistence mechanisms on macOS systems without explicit user consent. While designed for legitimate remote development functionality, these behaviors create security concerns including unauthorized
A sophisticated supply chain attack targeting BdThemes WordPress products has compromised thousands of websites through a poisoned API response mechanism. Attackers injected malicious code into the legitimate update distribution system, deploying backdoors disguised as theme templates. The breach af
Cybercriminals successfully compromised TrueConf’s distribution infrastructure, injecting malicious backdoors into legitimate client installers. Users downloading the video conferencing software between specific dates received trojanized versions that established persistent remote access for attacke
A Canadian national has pleaded guilty to orchestrating a massive data extortion campaign targeting Snowflake cloud database customers, compromising over 165 organizations worldwide. The attacker exploited stolen credentials to access sensitive customer data, extorting victims for millions of dollar
Apple is once again locked in a high-stakes battle with UK authorities over encryption backdoors, specifically regarding access to iCloud data. The UK government is pressuring Apple to create mechanisms that would allow law enforcement to bypass end-to-end encryption protections on iCloud services.
Security researchers have discovered that malware can steal Google-synced passkeys from infected systems without requiring user passwords, biometric authentication, or any interaction. The attack exploits the way Google Chrome syncs passkey data, allowing attackers to extract and reuse credentials o