Malware

Coordinated disruption of Glassworm infrastructure; assess supply-chain risk and harden package sources.

Active exploitation of FortiClient EMS; apply hotfixes and verify endpoint integrity to prevent credential theft.

Cross-ecosystem attack distributing credential-stealing malware; impacts developers and supply chains.

Attacker-inserted backdoors via GitHub tags affected numerous Laravel-Lang packages. Audit dependencies and rotate credentials.

New Mirai-derived botnet targets exposed ADB on IoT devices for large-scale DDoS; isolate exposed endpoints and rotate credentials.

ScarCruft trojanized a gaming platform to deploy backdoors on Windows and Android. Review supply chain and application trust.

VECT 2.0 acts more as a data wiper due to encryption nonce flaws; recovery unlikely even for attackers.

State-sponsored actors chain CVEs to backdoor FXOS/ASA devices; FIRESTARTER persists after patches.

New destructive wiper targeting energy utilities; review backups and incident response playbooks.