threat intelligence Archives • Page 2 of 12 • Daily CyberSecurity

APT37’s New “Python-in-a-Cat” Malware Uses Environment Variable Obfuscation APT37 Phishing Campaign Python Malware Obfuscation

APT37’s New “Python-in-a-Cat” Malware Uses Environment Variable Obfuscation

Ddos May 12, 2026

In the world of cyberespionage, familiarity can be a fatal mistake for defenders. Just as security teams...

The Claude AI Trap: Sophos Uncovers Undocumented Backdoor Hiding in Fake “Pro” Lure Claude AI Malware DonutLoader Backdoor

The Claude AI Trap: Sophos Uncovers Undocumented Backdoor Hiding in Fake “Pro” Lure

Ddos May 11, 2026

As the popularity of generative AI tools soars, cybercriminals are increasingly capitalizing on the hype to deploy...

Fileless Python Malware Uses Humanitarian Lures to Deploy Full-Spectrum Surveillance Python Cyberespionage Fileless Malware

Fileless Python Malware Uses Humanitarian Lures to Deploy Full-Spectrum Surveillance

Ddos May 11, 2026

According to the latest intelligence from Cyble Research and Intelligence Labs (CRIL), threat actors are actively demonstrating...

The CVE Watchtower: Weekly Threat Intelligence Briefing (May 4 – May 10, 2026) Weekly vulnerability digest May 2026

The CVE Watchtower: Weekly Threat Intelligence Briefing (May 4 – May 10, 2026)

Ddos May 11, 2026

Welcome to your weekly vulnerability digest. If you thought the threat landscape was plateauing as we entered...

shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316

The Q1 2026 Exploit Surge: AI Discovers the Flaws, APTs Reap the Rewards

Ddos May 11, 2026

The first quarter of 2026 has set a blistering and volatile pace for the cybersecurity industry, marked...

Self-Spreading TCLBANKER Trojan Hijacks WhatsApp to Drain Accounts TCLBANKER Trojan REF3076 Malware

Self-Spreading TCLBANKER Trojan Hijacks WhatsApp to Drain Accounts

Ddos May 8, 2026

Elastic Security Labs has uncovered a highly sophisticated Brazilian banking trojan dubbed TCLBANKER, tracked under the campaign...

The TOAD Trap: Why Scammers are Trading Malicious Links for VoIP Phone Numbers TOAD Attacks Telephone-Oriented Attack Delivery

The TOAD Trap: Why Scammers are Trading Malicious Links for VoIP Phone Numbers

Ddos May 8, 2026

While security teams have spent years perfecting the art of spotting malicious URLs and suspicious sender domains,...

The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying AiTM Phishing Campaign Microsoft MFA Bypass

The Compliance Trap: How a 13,000-Org Phishing Wave Bypasses MFA via AiTM Proxying

Ddos May 5, 2026

Microsoft’s Defender Security Research and Threat Intelligence teams have sounded the alarm on a massive, highly sophisticated...

Tropic Trooper Weaponizes GitHub and VS Code for East Asian Espionage Tropic Trooper Espionage VS Code Tunnels

Tropic Trooper Weaponizes GitHub and VS Code for East Asian Espionage

Ddos April 24, 2026

A sophisticated cyber espionage campaign has been uncovered targeting individuals across East Asia, leveraging a deceptive mix...

STX RAT: The New Financial Predator Hiding in the “Start of Text” STX RAT Financial Malware

STX RAT: The New Financial Predator Hiding in the “Start of Text”

Ddos April 13, 2026

A sophisticated new player entered the cyber-threat landscape. Analysts at eSentire’s Threat Response Unit (TRU) have identified...

LucidRook: Sophisticated Spear-Phishing Campaign Targets Taiwan with Custom Malware Stack LucidRook Malware Taiwan Cyber Attack

LucidRook: Sophisticated Spear-Phishing Campaign Targets Taiwan with Custom Malware Stack

Ddos April 13, 2026

Cisco Talos has uncovered a coordinated cluster of malicious activity targeting non-governmental organizations (NGOs) and universities in...

Under 10 Hours: The marimo Terminal RCE Exploited in a Record-Breaking AI Sprint marimo Terminal RCE AI-Assisted Exploitation

Under 10 Hours: The marimo Terminal RCE Exploited in a Record-Breaking AI Sprint

Ddos April 13, 2026

A critical flaw in marimo, a popular reactive Python notebook platform, has become the latest case study...

North Korea’s “Portfolio Model” Shatters Modern Attribution Attribution Resistance DPRK Cyber Portfolio

North Korea’s “Portfolio Model” Shatters Modern Attribution

Ddos April 10, 2026

North Korea’s cyber program has moved past the era of accidental growth into a period of “mature...

Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover Hypervisor Persistence vSphere Security

Ghosts in the Hypervisor: Mandiant Exposes the 400-Day vSphere Takeover

Ddos April 9, 2026

A new deep-dive report from Mandiant (part of Google Cloud) explores the evolving threats facing the VMware...

Team Cymru Mapped the Yurei Ransomware Toolkit Before It Could Strike Yurei Ransomware Open-Source Malware

Team Cymru Mapped the Yurei Ransomware Toolkit Before It Could Strike

Ddos April 8, 2026

A new investigation by Team Cymru has detailed how the proactive collection of internet telemetry allowed researchers...

The Python Pivot: Kimsuky’s New Multi-Stage LNK Maze for Stealthy Backdoors Kimsuky Multi-stage LNK

The Python Pivot: Kimsuky’s New Multi-Stage LNK Maze for Stealthy Backdoors

Ddos April 8, 2026

The notorious Kimsuky threat group is refining its arsenal, shifting toward more complex, multi-stage execution chains to...

AI Against AI: Anthropic Unveils “Project Glasswing” to Stop the Next Great Cyber War Anthropic Project Glasswing

AI Against AI: Anthropic Unveils “Project Glasswing” to Stop the Next Great Cyber War

Ddos April 8, 2026

As generative AI technologies proliferate, global anxieties regarding their potential misuse—particularly as instruments for cyber warfare and...

Copyright Lures and “Fileless” Shadows: Inside the PureLog Stealer Campaign PureLog Stealer Fileless Malware

Copyright Lures and “Fileless” Shadows: Inside the PureLog Stealer Campaign

Ddos March 24, 2026

A highly organized malware campaign is currently stalking key industries by weaponizing something every professional fears: a...

New “StoatWaffle” Malware Emerges in North Korean “Contagious Interview” Campaign StoatWaffle WaterPlum

New “StoatWaffle” Malware Emerges in North Korean “Contagious Interview” Campaign

Ddos March 23, 2026

A new modular malware threat has been identified in the wild, signaling a shift in tactics for...

Weaponizing Trust: FBI Warns Iran’s MOIS is Using Telegram as a Malware C2 Hub Telegram C2 Iran MOIS

Weaponizing Trust: FBI Warns Iran’s MOIS is Using Telegram as a Malware C2 Hub

Ddos March 22, 2026

The Federal Bureau of Investigation (FBI) has issued a high-priority “FLASH” alert detailing a sophisticated cyber-intelligence operation...