malware Archives • Page 23 of 26 • Daily CyberSecurity

Beware Fake PDF Converters: A Social Engineering Threat

shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316

Beware Fake PDF Converters: A Social Engineering Threat

Do Son April 16, 2025

In today’s digital age, online file converters have become indispensable tools for streamlining daily workflows. However, a...

BPFDoor Backdoor Used in Asia, Middle East Cyberespionage IARPA Research Security Data Abyss Report Telecom threat, Secret Service cybersecurity news - Cyber Espionage Campaign

IARPA Research Security Data Abyss Report Telecom threat, Secret Service cybersecurity news - Cyber Espionage Campaign

BPFDoor Backdoor Used in Asia, Middle East Cyberespionage

Do Son April 16, 2025

A recent report by Trend Micro has uncovered a stealthy, state-sponsored backdoor called BPFDoor, which has been...

BRICKSTORM Backdoor Targets European Industries BRICKSTORM, Cyber Espionage

BRICKSTORM Backdoor Targets European Industries

Do Son April 16, 2025

In a recent technical expose, NVISO sheds light on BRICKSTORM, a stealthy espionage backdoor attributed to the...

ResolverRAT: New RAT Employs Advanced Evasion Techniques Lotus Wiper Digital Sabotage G_Wagon Malware NPM Supply Chain Attack IMAPLoader malware ResolverRAT Malware Evasion

Lotus Wiper Digital Sabotage G_Wagon Malware NPM Supply Chain Attack IMAPLoader malware ResolverRAT Malware Evasion

ResolverRAT: New RAT Employs Advanced Evasion Techniques

Do Son April 15, 2025

A new remote access trojan (RAT) has emerged, and it’s armed with advanced techniques to evade detection....

DarkHotel APT Group’s Evolving Attack Techniques DarkHotel, APT group

DarkHotel APT Group’s Evolving Attack Techniques

Do Son April 15, 2025

A recent investigation by the Knownsec 404 Advanced Threat Intelligence Team has uncovered a new wave of...

Fake Font Domain Used in Credit Card Skimming Attack WordPress Backdoor

Fake Font Domain Used in Credit Card Skimming Attack

Do Son April 15, 2025

A recent investigation by Sucuri revealed a sophisticated credit card skimming attack on a WordPress website. The...

DAMASCENED PEACOCK: NCSC Uncovers Sophisticated Malware Targeting UK MOD Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis

Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis

DAMASCENED PEACOCK: NCSC Uncovers Sophisticated Malware Targeting UK MOD

Do Son April 15, 2025

In a covert campaign targeting the UK Ministry of Defence, a sophisticated malware dubbed DAMASCENED PEACOCK has...

Slow Pisces Targets Crypto Developers with Deceptive Coding Challenges BingX cyberattack FortiGate SSO Attacks Firewall Config Theft

Slow Pisces Targets Crypto Developers with Deceptive Coding Challenges

Do Son April 14, 2025

In a recent cybersecurity report by Unit 42, a North Korean state-sponsored threat group known as Slow...

GOFFEE APT: New PowerModul Implant and Tactics Target Russian Organizations GOFFEE APT Russian cyberattacks

GOFFEE APT: New PowerModul Implant and Tactics Target Russian Organizations

Do Son April 14, 2025

The APT group GOFFEE has resurfaced with a revamped arsenal, launching targeted cyberattacks across Russia’s strategic sectors....

ViperSoftX Malware: Arabic-Speaking Attackers Exploit PowerShell in New Cyberattack Campaign ViperSoftX malware South Korea cyberattack

ViperSoftX Malware: Arabic-Speaking Attackers Exploit PowerShell in New Cyberattack Campaign

Do Son April 13, 2025

AhnLab Security intelligence Center (ASEC) has revealed a cyberattack campaign where Arabic-speaking attackers are distributing ViperSoftX malware,...

Sapphire Werewolf’s Amethyst Stealer Targets Energy Companies Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Sapphire Werewolf’s Amethyst Stealer Targets Energy Companies

Do Son April 11, 2025

A new report from BI.ZONE Threat Intelligence reveals that the threat actor Sapphire Werewolf is actively refining...

SideCopy APT Group Evolves Tactics, Targets Critical Indian Infrastructure SideCopy APT Cybersecurity Threats

SideCopy APT Group Evolves Tactics, Targets Critical Indian Infrastructure

Do Son April 11, 2025

The cyber threat landscape is in constant flux, with threat actors continuously refining their techniques to breach...

Shuckworm’s Sophisticated Cyber Campaign Targets Ukraine Military Mission Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Shuckworm’s Sophisticated Cyber Campaign Targets Ukraine Military Mission

Do Son April 10, 2025

Russia-linked espionage group Shuckworm (also known as Gamaredon or Armageddon) has launched a renewed and more sophisticated...

Scattered Spider Evolving: New Tactics and Spectre RAT Scattered Spider Tactics Phishing kits

Scattered Spider Evolving: New Tactics and Spectre RAT

Do Son April 10, 2025

The threat landscape is in a constant state of flux, with cybercriminal groups continually adapting their techniques...

“Pick Your Poison” Phishing Attack: Credentials or Malware? Phishing Attack Double-edged phishing

“Pick Your Poison” Phishing Attack: Credentials or Malware?

Do Son April 10, 2025

Cybercriminals have upped their game with a phishing campaign so cunning, it offers victims a choice—between stolen...

Neptune RAT: Advanced Malware Targets Windows with Destructive Capabilities Neptune RAT, Remote Access Trojan

Neptune RAT: Advanced Malware Targets Windows with Destructive Capabilities

Do Son April 9, 2025

CYFIRMA researchers have uncovered a new version of the Neptune RAT, a Remote Access Trojan (RAT) that...

Vidar Stealer Hides in Legitimate BGInfo Tool Vidar Stealer, malware, BGInfo

Vidar Stealer Hides in Legitimate BGInfo Tool

Do Son April 9, 2025

Vidar Stealer, a notorious information-stealing malware that first emerged in 2018, continues to pose a significant threat...

SourceForge Used to Distribute ClipBanker Trojan and Cryptocurrency Miner

Do Son April 9, 2025

For many developers, SourceForge has long been a cornerstone of open-source collaboration — a trusted hub to...

Grandoreiro Trojan Resurges in Phishing Attacks Grandoreiro, banking trojan, phishing

Grandoreiro Trojan Resurges in Phishing Attacks

Do Son April 9, 2025

Cybercriminals are actively distributing the Grandoreiro banking trojan through large-scale phishing campaigns, primarily targeting banking users in...

Malware on npm “Patches” Local Packages with Reverse Shell npm reverse shell

Malware on npm “Patches” Local Packages with Reverse Shell

Do Son March 28, 2025

A recent report by ReversingLabs (RL) has uncovered malicious packages on the npm repository that employ sophisticated...

Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis