The U.S. State Department has announced a combined $10 million reward for information leading to the identification or location of members from two Russian hacking groups—UNC5792 and UNC4221—who have been actively targeting users of encrypted messaging platforms including WhatsApp and Signal. These
Russia-linked APT group Turla has been observed deploying a previously undocumented backdoor called STOCKSTAY in targeted espionage operations against Ukrainian entities. The sophisticated campaign leverages compromised infrastructure to establish persistent access, with the malware demonstrating ad
Millenium RAT, a sophisticated remote access trojan rewritten in C++, has compromised over 62,000 devices across 160 countries in an accelerating global campaign. The malware features advanced persistence mechanisms, credential harvesting capabilities, and keylogging functionality. Attackers are dis
Microsoft has purged 119 malicious browser extensions from the Edge Add-ons store following the discovery of a sophisticated malware campaign dubbed “StegoAd.” The extensions used steganography to conceal malicious code within seemingly innocent image files and custom fonts, enabling attackers to in
Threat actors have compromised legitimate npm and Go packages to deliver a sophisticated Python-based infostealer that exploits Visual Studio Code’s task automation system. The malware hijacks VS Code’s tasks.json configuration to execute malicious payloads silently when developers open infected pro
A new malware loader dubbed SharkLoader has emerged in the wild, serving as the initial infection vector for sophisticated cyberattacks that ultimately deploy Cobalt Strike beacons. The StrikeShark campaign leverages this multi-stage loader to establish persistent access, evade detection, and enable
Chinese state-sponsored threat actor CL-STA-1062 has intensified operations targeting critical infrastructure across Southeast Asia, deploying custom malware frameworks designed for long-term espionage and potential disruptive operations. The campaign focuses on energy, telecommunications, and gover
A Chinese-speaking advanced persistent threat (APT) group tracked as CL-STA-1062 has been observed deploying a previously unknown backdoor dubbed TinyRCT in targeted cyber espionage operations across Southeast Asia. The sophisticated malware features remote access capabilities, command execution fun
A critical privilege escalation vulnerability (CVE-2026-46331) in the Linux kernel’s traffic control subsystem has been publicly disclosed, enabling unprivileged users to gain root access through copy-on-write (COW) manipulation. The “pedit COW” exploit leverages the `tc` (traffic control) utility’s
A critical privilege escalation vulnerability dubbed “DirtyClone” (CVE-2024-43503) has been discovered in the Linux kernel’s packet cloning mechanism. The flaw allows unprivileged local users to gain root access by manipulating cloned network packets, affecting multiple kernel versions. With a CVSS