Belarusian Hacktivists Infiltrate Russian Healthcare Network for Two Years
Belarusian Cyber Partisans reportedly conducted a two-year espionage campaign within Russian healthcare networks for intel and disruption.
Wednesday, October 7
Iranian Hackers Exploit Fake Recruitment to Infiltrate Iraqi Infrastructure
Iranian-affiliated Blinder Tunnel campaign used a booby-trapped Dubai Airports coding test to target Iraqi critical infrastructure for persistence and tunneling.
ClickFix Attack Exploits Browser Cache to Deliver Malicious Payloads
ClickFix prefetches payloads into browser cache disguised as PNGs to bypass Run limits and execute malicious scripts.
Friday, October 2
Wednesday, September 30
Monday, September 28
AI Advances Challenge EDR Systems with Modified Credential Dumper
PremiumLocal uncensored AI modified a credential-dumping tool to evade two EDR products, demonstrating AI-assisted offensive tooling risks.
Emerging x47.c Botnet Utilizes AI to Drain API Credits
Premiumx47.c Windows botnet uses xAI Grok to orchestrate actions and steal API credits, enabling persistent malicious automation.
Novel Windows Process Injection Technique Bypasses Traditional EDR Monitoring
PremiumNew console named-pipe process-injection technique bypasses common EDR hooks by avoiding WriteProcessMemory and VirtualAllocEx APIs.
Friday, September 25
Groundbreaking AI Malware Uses Ensemble Models for Command Decisions
PremiumCisco Talos documents an autonomous AI C2 implant using ensemble-model voting to select malicious tasks and payloads.
MemTensor Packages Compromised: Credential Stealing Threat Uncovered
PremiumCompromised MemTensor packages on npm/PyPI delivered sckit Go-based implant across Windows, Linux, and macOS.
Konni Malware Campaign Targets Ukrainian Entities with Fake PDF Lures
PremiumKonni campaign uses fake PDF shortcut lures to deliver VelvetCake downloader targeting Ukrainian political and military organizations.
Android Spyware Campaign Targets Logistics Firms Through Fake Google Play Pages
PremiumCorp MDM Android spyware targets logistics firms, steals SMS, and redirects calls via fake Google Play pages.
Wednesday, September 23
Chinese Cyber Threat Group UTA0565 Exploits Chrome and Microsoft Vulnerabilities
Volexity observes UTA0565 exploiting Chrome and Microsoft defects with a shared exploit kit across China-aligned groups.
SideCopy Expands Espionage Campaign to Indian Academia with ReverseRAT
SideCopy uses spear-phishing and mshta.exe to deliver ReverseRAT, targeting Indian academic institutions for espionage.
BigDiskBuster Zero-Day Exploit Challenges Microsoft Defender Updates
Researcher Nightmare Eclipse published Defender exploits/PoC (BigDiskBuster) that block Defender updates and affect endpoint protections.
Monday, September 21
Steam Vulnerability Opens Door to SYSTEM Privilege Escalation on Windows
PremiumBrokenPipe PoC abuses Steam Client Service to silently escalate a local standard user to NT AUTHORITY\SYSTEM privileges.
Microsoft Fixes Critical Vulnerability in Azure AI Foundry
PremiumCVE-2026-85889 allowed unauthenticated privilege escalation in Azure AI Foundry; Microsoft released an urgent patch.
Friday, September 18
SilkParasite's Long-Standing Espionage Operation Unveiled in Central Asia
PremiumSilkParasite espionage infrastructure traced across Central Asia, using spear-phishing and trusted Windows programs to deploy RATs.
Google Chrome 153 Update Patches Critical Security Vulnerabilities
PremiumGoogle released Chrome 153 fixing 42 vulnerabilities including three critical bugs; update browsers to reduce exposure.
Wednesday, September 16
Get these articles delivered to your inbox.
Subscribe free