A new malware loader dubbed SharkLoader has emerged in the wild, serving as the initial infection vector for sophisticated cyberattacks that ultimately deploy Cobalt Strike beacons. The StrikeShark campaign leverages this multi-stage loader to establish persistent access, evade detection, and enable
Chinese state-sponsored threat actor CL-STA-1062 has intensified operations targeting critical infrastructure across Southeast Asia, deploying custom malware frameworks designed for long-term espionage and potential disruptive operations. The campaign focuses on energy, telecommunications, and gover
A Chinese-speaking advanced persistent threat (APT) group tracked as CL-STA-1062 has been observed deploying a previously unknown backdoor dubbed TinyRCT in targeted cyber espionage operations across Southeast Asia. The sophisticated malware features remote access capabilities, command execution fun
A critical security vulnerability in Amazon Q Developer allows maliciously crafted Git repositories to execute arbitrary code and steal AWS credentials when developers clone and interact with compromised repos. The flaw exploits Amazon Q’s code analysis features, turning a productivity tool into an
Contrary to apocalyptic predictions, AI is generating new entry-level cybersecurity opportunities rather than eliminating them. As organizations deploy AI-powered security tools, they need human analysts to validate findings, tune systems, and make contextual decisions. The shift creates demand for
A critical privilege escalation vulnerability (CVE-2026-46331) in the Linux kernel’s traffic control subsystem has been publicly disclosed, enabling unprivileged users to gain root access through copy-on-write (COW) manipulation. The “pedit COW” exploit leverages the `tc` (traffic control) utility’s
The Ukrainian cyber threat group UAC-0226 has deployed a sophisticated attack chain dubbed GIFTEDCROOK that exploits WinRAR’s Alternate Data Streams (ADS) handling to deliver a multi-stage malware infection. The campaign leverages reflective DLL loading techniques to deploy an information stealer ta
A critical privilege escalation vulnerability dubbed “DirtyClone” (CVE-2024-43503) has been discovered in the Linux kernel’s packet cloning mechanism. The flaw allows unprivileged local users to gain root access by manipulating cloned network packets, affecting multiple kernel versions. With a CVSS
A massive data breach at a third-party identity verification provider has exposed over one million passport scans and associated personal information online. The compromised data includes full passport images, selfie photos, government-issued ID documents, and personally identifiable information (PI
Miasma, a newly discovered malware strain, has infiltrated the npm ecosystem and GitHub Actions workflows, creating a sophisticated supply chain attack vector. The malware exfiltrates sensitive credentials, manipulates CI/CD pipelines, and establishes persistent backdoors across development environm