A sophisticated Brazilian banking trojan has been detected actively spreading across Portugal, targeting financial institutions and their customers. The malware employs advanced evasion techniques, including process hollowing, keylogging, and screen capture capabilities to steal banking credentials.
The Chaos Gang cybercrime group has introduced msaRAT, a sophisticated remote access trojan that leverages legitimate browser processes (Chrome and Edge) to route command-and-control traffic. This novel evasion technique allows the malware to blend C2 communications with normal browsing activity, by
A sophisticated supply chain attack dubbed SANDWORM_MODE has emerged targeting AI development toolchains, compromising machine learning pipelines through poisoned dependencies. The attack leverages vulnerabilities in popular Python packages used for AI/ML model training, allowing attackers to inject
The wp2shell exploit framework is actively targeting WordPress installations through malicious file upload vulnerabilities, enabling attackers to establish persistent web shells on compromised servers. Visitors to infected sites face risks including malware distribution, credential theft, and browse
Multiple AsyncAPI npm packages were compromised when attackers exploited GitHub Actions workflows to inject Miasma RAT malware. The supply chain attack affected several widely-used packages, exposing thousands of downstream users to remote access trojans. The threat actors leveraged compromised GitH
Threat actors are leveraging Telegram bots as command-and-control (C2) infrastructure to maintain persistent backdoor access to government networks across the Middle East. This sophisticated campaign uses encrypted messaging channels to remotely execute commands, exfiltrate sensitive data, and evade
Two critical vulnerabilities in WordPress Core (CVE-2026-60137 and CVE-2026-63030) are being actively exploited in the wild through a campaign dubbed “WP2Shell.” These flaws allow unauthenticated attackers to achieve remote code execution and complete site takeover on millions of WordPress installat
A massive malware distribution campaign dubbed “FakeGit” has weaponized approximately 7,600 GitHub repositories to deliver SmartLoader malware. Attackers are exploiting GitHub’s trusted reputation by creating fake repositories that masquerade as legitimate software projects, tricking developers and
A critical remote code execution (RCE) vulnerability (CVE-2026-63030) in WordPress core is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute arbitrary code on vulnerable WordPress installations, affecting versions prior to the emergency security release. Mass
A sophisticated threat actor known as GoldenEyeDog successfully breached DigiCert’s infrastructure, compromising code-signing certificates that organizations trust to verify software authenticity. The breach enables attackers to sign malicious code with legitimate certificates, bypassing security co