In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years 2026-10-09 at 15:03 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry. The post In Other News: AI Used in […]
Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries 2026-10-09 at 12:55 By Kevin Townsend Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices. The post Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries appeared first on SecurityWeek. This article is an excerpt from […]
Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries Read More »
US Disrupts Chinese State-Sponsored Hacking Tools 2026-10-09 at 11:36 By Ionut Arghire Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure. The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
US Disrupts Chinese State-Sponsored Hacking Tools Read More »
FortiBleed Attackers Locking Victims Out of Fortinet Devices 2026-10-08 at 10:52 By Ionut Arghire Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Attackers Locking Victims Out of Fortinet Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
FortiBleed Attackers Locking Victims Out of Fortinet Devices Read More »
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads 2026-10-06 at 13:34 By Ionut Arghire Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Running NPM Malware Campaign Accumulates 40,000 Downloads appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads Read More »
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws 2026-10-05 at 16:00 By Ionut Arghire ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation. The post Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws Read More »
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats 2026-10-02 at 17:30 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android app flaws. The post In Other News: $15K iCloud […]
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor 2026-10-02 at 16:15 By Kevin Townsend The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime. The post macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor appeared first on SecurityWeek. This article […]
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor Read More »
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks 2026-10-02 at 12:34 By Ionut Arghire The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks Read More »
AI Agents Aimed SQL Injection at US and Canadian Government Sites 2026-10-02 at 11:38 By Eduard Kovacs The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI. The post AI Agents Aimed SQL Injection at US and Canadian Government Sites appeared first on SecurityWeek. This […]
AI Agents Aimed SQL Injection at US and Canadian Government Sites Read More »
Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks 2026-09-30 at 13:59 By Ionut Arghire The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor. The post Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks Read More »
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks 2026-09-29 at 16:03 By Ionut Arghire The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. The post Hackers Use ChatGPT Custom GPTs in ClickFix Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks Read More »
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability 2026-09-28 at 12:44 By Ionut Arghire The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability Read More »
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining 2026-09-26 at 15:00 By Ionut Arghire The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions. The post New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining appeared first on SecurityWeek. This article is an excerpt from […]
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining Read More »
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure 2026-09-25 at 18:07 By SecurityWeek News Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul. The post In Other News: Clop Leak Site Takeover, Docker […]
AI-Powered Campaign Targets Hundreds of Online Retailers 2026-09-24 at 15:48 By Ionut Arghire A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration. The post AI-Powered Campaign Targets Hundreds of Online Retailers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
AI-Powered Campaign Targets Hundreds of Online Retailers Read More »
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer 2026-09-21 at 18:46 By Ionut Arghire The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware. The post Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer Read More »
RatHat Android Trojan Uses AI for Automation 2026-09-21 at 15:51 By Ionut Arghire The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion. The post RatHat Android Trojan Uses AI for Automation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
RatHat Android Trojan Uses AI for Automation Read More »
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites 2026-09-18 at 12:46 By Ionut Arghire Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts. The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites Read More »
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware 2026-09-16 at 15:00 By Eduard Kovacs US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C. The post US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware appeared first on SecurityWeek. This […]
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware Read More »