ACTIVE THREATS: Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers • AI-powered attack exploited PaperCut flaws to hack 395 organizations • Microsoft Excel KB5002914 update breaks copy and paste for some users • Surfshark VPN says hackers breached internal testing, proxy servers • PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances ACTIVE THREATS: Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers • AI-powered attack exploited PaperCut flaws to hack 395 organizations • Microsoft Excel KB5002914 update breaks copy and paste for some users • Surfshark VPN says hackers breached internal testing, proxy servers • PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
Latest cybersecurity malware news, analysis, and intelligence.
Six coordinated Android malware families target Brazilian financial systems, harvesting banking credentials and intercepting Pix payments through specialized trojans and remote access tools. PixRevolution leads the assault by manipulating payment authorization flows, while TaxiSpy RAT and others ope
Zombie ZIP exploits parsing inconsistencies in ZIP files to evade antivirus detection. Malware payloads remain hidden during security scans but extract successfully when users open the archive.
BeatBanker is an Android banking trojan impersonating Starlink to distribute via fake Google Play Store sites. It enables financial fraud, credential theft, and complete device compromise.
AI-generated phishing emails click 60% higher than human-crafted attacks, with spear-phishing reaching 73% improvement. A study of 1.5M emails confirms a major threat shift.
APT41 deployed DUSTPAN malware against defense contractors globally to steal hypersonic missile designs. The memory-based tool evades detection and masks traffic as cloud communications.
Nearly 300 malicious npm packages stole developer credentials via typosquatting (fake package names like "lodahs" for "lodash") and dependency confusion. The attack targeted Fortune 500 companies and government contractors, accumulating over 4 million installations before removal.
Banshee 3.0 macOS malware exploits stolen Apple developer certificates to bypass Gatekeeper protections, distributing via trojanized GitHub apps to harvest credentials and cryptocurrency. Priced at $3,000/month on Russian forums, the sophisticated information stealer represents a shift toward weapon