Threat actors are weaponizing politically sensitive and forbidden text strings within malware code to exploit AI security systems’ content filtering mechanisms. By embedding phrases related to weapons, terrorism, and restricted topics, attackers cause AI-powered analysis tools to refuse processing t
Microsoft’s Digital Crimes Unit (DCU) successfully dismantled over 200 command-and-control (C2) servers associated with both Amadey bot malware and StealC information stealer in a coordinated legal takedown. This marks the first time a court-authorized operation has simultaneously targeted two disti
A sophisticated backdoor dubbed “Mistic” has been linked to KongTuke, a known ransomware access broker operating in the cybercriminal underground. The malware enables initial access operations by maintaining persistent, stealthy footholds in compromised networks before selling access to ransomware o
A sophisticated supply chain attack has emerged targeting OpenClaw’s ClawHub Skill Marketplace, where threat actors have been distributing malicious AI agent “skills” designed to exfiltrate sensitive data while evading traditional security controls. The malware leverages AI-specific execution enviro
North Korean threat actors have deployed macOS.Gaslight, a sophisticated Rust-based backdoor that employs an unprecedented defensive mechanism: weaponized prompt injection attacks targeting security analysts using AI-powered analysis tools. Rather than escaping sandboxes through prompt manipulation,
A critical vulnerability dubbed “Cordyceps” has been discovered in GitHub Actions workflows, enabling attackers to hijack CI/CD pipelines across major organizations including Microsoft, Google, and Apache. The flaw exploits misconfigurations in GitHub Actions that allow malicious actors to inject co
The dark web’s cybercrime marketplace has evolved into a sophisticated economy where stolen identities sell for as little as 95 cents, malware-as-a-service operates on subscription models, and scam kits are available for hire. This underground ecosystem generates billions annually, fueling identity
Law enforcement and cybersecurity partners have successfully disrupted the SocGholish malware distribution network, severing a critical access pathway used by the notorious Evil Corp cybercrime syndicate. The takedown targeted the Traffic Distribution System (TDS) infrastructure responsible for deli
A massive exploitation campaign dubbed “FortiBleed” has compromised over 430,000 Fortinet FortiGate firewalls worldwide, turning enterprise security infrastructure into credential-harvesting machines. Attackers are leveraging a critical vulnerability to deploy persistent backdoors that intercept and
Microsoft has identified CryptoBandits, a new USB-propagating malware strain that hijacks cryptocurrency transactions by replacing wallet addresses in the clipboard. The malware uses Tor for command-and-control communications, spreads via infected USB drives, and has already compromised systems acro