Critical Vulnerability in WooCommerce Plugin Threatens WordPress Sites
Attackers actively exploit critical WooCommerce Wholesale Lead Capture premium plugin to upload PHP backdoors and compromise WordPress sites.
§Topic · Malware
Malware
New malware families, loaders, trojans, backdoors, rootkits, and the infection chains security teams are tracking.
All dispatchesWednesday, September 16
Cyberattack on Thai ISP Exploits Fortinet and F5 Vulnerabilities
Thai ISP 3BB breached leveraging Fortinet and F5 vulnerabilities; attackers exfiltrated subscriber credentials and deployed backdoors.
Sandworm Exploits Cisco Vulnerabilities to Revive Cyclops Blink Botnet
Sandworm chains Cisco vulnerabilities to deploy an upgraded Cyclops Blink botnet, reviving disrupted infrastructure-takeover tooling.
Chinese Hackers Exploit Unpatched Flaws in Chrome and Windows to Deploy GRIMWEDGE Backdoor
China-linked actors chained Chrome and Windows flaws to deploy GRIMWEDGE JavaScript backdoor against NGOs; validate browser and OS patching.
Monday, September 14
GuardBreaker Technique Exploits AI Vulnerabilities in Malware Analysis
PremiumObservers detected GuardBreaker prompt-injection technique used to conceal dangerous prompts inside benign comments to fool AI scanners.
Indonesia Faces New Android Banking Malware Threat
PremiumGoldFactory group abuses Android Work Profile to deliver Gigabud Trojan, while Mantax Otax spreads via app-cloning campaigns.
Tencent App Vulnerability Leads to GrayRabbit Malware Infiltration
PremiumActors exploited Tencent Sogou Input Method CVE-2026-51990 to install GrayRabbit backdoor on Windows endpoints.
Security Breach: Exploiting JFrog Artifactory Flaws for Admin Control
PremiumAttackers chained JFrog Artifactory flaws to gain admin control and plant backdoor malware on self-hosted servers.
Friday, September 11
WeChat Vulnerability Exploited by Zero-Click Worm on Mobile Devices
PremiumResearchers demonstrate a WeChat zero-click worm capable of hijacking phones via crafted calls using AI tooling.
Cybercriminals Exploit Infostealer Logs to Bypass MFA with AI Tokens
PremiumInfostealer logs reveal replayable AI tokens and API keys that attackers reuse to access model providers, bypassing MFA protections.
F5 BIG-IP APM Malware Conceals PHP Web Shell in Memory to Evade Detection
PremiumMalware tied to F5 BIG-IP APM intrusions injects PHP web shell into memory to evade disk-based detection and persistence.
Critical Vulnerabilities in Cisco Firewalls Exploited for Malicious Attacks
PremiumCisco Talos confirms exploitation of Secure FMC flaws enabling root access, malware deployment and staged intrusions by multiple actors.
Get these articles delivered to your inbox.
Subscribe free