Over 400 packages in the Arch User Repository (AUR) were compromised in a sophisticated supply chain attack that deployed information-stealing malware and an eBPF-based rootkit. The attacker hijacked maintainer accounts and injected malicious code into build scripts, affecting thousands of users who
The Atomic Arch campaign has compromised over 20 packages in the Arch User Repository (AUR), a popular community-driven repository for Arch Linux users. Attackers hijacked legitimate package maintainer accounts to inject malicious payloads that steal sensitive information, establish persistence, and
A significant supply chain attack has compromised over 400 packages in the Arch User Repository (AUR), injecting malicious code designed to install a rootkit and infostealer on Linux systems. The malware establishes persistence, exfiltrates sensitive data, and provides attackers with backdoor access
A new malware-as-a-service platform called OnyxC2 has emerged targeting credentials from 210 different applications including browsers, cryptocurrency wallets, password managers, and messaging platforms. This commercially available malware framework enables threat actors to deploy information-steali
CISA has issued an emergency directive requiring all federal agencies to patch a critical Ivanti Connect Secure vulnerability within 72 hours. The flaw, actively exploited in the wild, allows unauthenticated attackers to achieve remote code execution. This directive applies to civilian federal agenc
A critical vulnerability in Palo Alto Networks’ PAN-OS operating system allows authenticated attackers to execute arbitrary commands with root privileges on affected firewalls. The flaw, which affects multiple PAN-OS versions, poses a significant threat to enterprise networks relying on these widely
The Gentlemen ransomware has emerged as a significant threat, claiming 478 victims worldwide with unique worm-like propagation capabilities. This sophisticated malware combines traditional encryption tactics with self-spreading mechanisms, enabling rapid network infiltration. Organizations face heig
OnyxC2, a newly discovered Malware-as-a-Service (MaaS) platform, provides cybercriminals with enterprise-grade capabilities for sophisticated data exfiltration operations. This commercial C2 framework features advanced evasion techniques, modular architecture, and comprehensive data theft modules th
Threat actors are increasingly abusing residential proxy networks to disguise malicious activity as legitimate traffic from home users. By routing attacks through compromised residential IP addresses, cybercriminals can evade traditional security controls, bypass geo-restrictions, and avoid IP-based
The OceanLotus APT group (APT32) has launched a sophisticated cyber-espionage campaign dubbed “FireAnt” targeting Vietnamese investors and financial sector entities. The operation leverages a newly identified backdoor malware called SPECTRALVIPER, delivered through weaponized documents disguised as