UPDATED
AlienVault OTX · · Medium severity
In July 2026, a sophisticated Go-based botnet named NadMesh was discovered actively deploying across the internet. Unlike traditional worms, it integrates autonomous scanning, exploitation of 20+ vulnerabilities, and targeted harvesting...
The Hacker News · · Medium severity
Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it's designed to rig live game results on Digitain. The package,...
BleepingComputer · · Medium severity
A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads.
MEDIANAMA · · Medium severity
The Securities and Exchange Board of India (SEBI) has imposed a total penalty of Rs 1 crore on Central Depository Services (India) Limited (CDSL ) for multiple cybersecurity and regulatory lapses that culminated in the malware attack on...
SecurityWeek · · Medium severity
Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop. The post New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C Communication appeared first on SecurityWeek .
BleepingComputer · · Critical severity
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances.
The Hacker News · · Medium severity
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as...
TechSpot · · Medium severity
Researchers have uncovered a fresh vulnerability in the open-source file archiver. The bug lies in the decompression routine for XZ data, where a buffer overflow could eventually let attackers run malicious code remotely. A patch is...
The Hacker News · · Medium severity
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One...
BleepingComputer · · Medium severity
A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data.
Help Net Security · · Medium severity
Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. Targeted campaign tied to Iranian...
The Hacker News · · Medium severity
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050....
AppleInsider · · Medium severity
Security firm Group-IB has uncovered ClickLock Stealer, a new Mac threat that hijacks normal system behavior to pressure victims into handing over passwords and access. ClickLock Stealer The firm said the campaign has reached at least...
TNW · · Medium severity
The fight over AI in Hollywood used to be about the future. This month it turned into a fight about the present. Within days, a studio, a director and a union each drew a line.
SecurityWeek · · Critical severity
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533. The post SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch appeared first on SecurityWeek .
MacRumors · · Medium severity
Security firm Group-IB has identified a new piece of macOS malware in the wild that pressures users into surrendering their passwords via a barrage of fake system prompts. Dubbed "ClickLock Stealer," the malware needs no exploits and no...
Infosecurity Magazine · · Medium severity
Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel
IT Security Guru · · Medium severity
Scams accounted for almost 46% of all threat detections in the first half of 2026, making them the single largest category of malicious activity tracked by Gen Digital , the company behind Norton, Avast, LifeLock and MoneyLion,...
IT Security Guru · · Medium severity
A previously undocumented strain of Windows malware is using Microsoft 365 calendar invites as a covert communications channel, allowing attackers to issue commands and exfiltrate stolen files from victim networks while hiding in plain...
The Hacker News · · Medium severity
A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations to Google's open-source Gemini CLI artificial intelligence (AI) and commandeered a live botnet. The findings come from an analysis of 200...
Ghacks Technology News · · Medium severity
The FBI has arrested a 21-year-old Florida resident accused of running a cybercrime operation that infected around 8,000 PCs with malware spread through video games. The operation reportedly stole about $220,000 in cryptocurrency from...
TechSpot · · Medium severity
The suspect, identified by the FBI as Zyaire Dontaevious Zamarion Wilkins, is accused of running a sophisticated cybercrime operation with unnamed co-conspirators for nearly two years. The group allegedly infected around 8,000 PCs by...
The Hacker News · · Medium severity
Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response...
9to5Mac · · Medium severity
Apple @ Work is exclusively brought to you by Mosyle , the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the solutions necessary to seamlessly and automatically...
AlienVault OTX · · Medium severity
NadMesh is an industrial-grade Go-based botnet observed in July 2026 that autonomously scans and exploits AI infrastructure and cloud services. The botnet integrates scanning, exploitation, and intelligence harvesting into a single...
TechRepublic · · Medium severity
ClickLock can shut down Mac apps for more than three days while pressuring users to enter a password and stealing sensitive account data in the background. The post ClickLock Mac Malware Traps Users in a Three-Day Password Loop appeared...
AlienVault OTX · · Medium severity
A DPRK-aligned threat group is targeting developers through fake job postings and coding challenges in a campaign tracked as REF9403. Attackers post fake job offers in developer forums, then send trojanized repositories containing fully...
The Hacker News ·
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI,...
IT Pro · · Medium severity
Ross Kelly is ITPro's News & Analysis Editor, with a keen interest in cyber security, business leadership and emerging technologies. He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro...
The Verge · · Medium severity
A final hearing will take place in June. | The Verge / Beatrice Sala Federal authorities have arrested a Florida man suspected of stealing at least $220,000 in crypto through malware-infected Steam games, as reported earlier by local...
TechRadar · · Medium severity
Dangerous new GoSerpent malware is apparently on the hunt for government secrets
SecurityWeek · · High severity
Noteworthy stories that might have slipped under the radar: OpenClaw AI agents exploited via WhatsApp, ransomware hits naval defense firm TKMS, Lidl discloses data breach. The post In Other News: Iran Tracks US Military Phones,...
Hackaday ·
Following the reports last week using the Windows Global Device ID (GDID) in tracking a malware operators behavior, here is a comprehensive write-up about what goes into the GDID and how it is used. It’s worth noting that the GDID...
The Hacker News · · Medium severity
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. "Any...
HackRead · · Medium severity
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows…
Digital Trends · · Medium severity
ClickLock is a new macOS malware that repeatedly kills system processes and tricks victims into entering their login password to steal sensitive data.
The Hacker News · · Medium severity
Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in Southeast Asia since late 2025 with a focus on long-term access and...
CSO Online Security · · Medium severity
Threat actors are now abusing an ordinary font file to deliver low-detection malware capable of stealing credentials and establishing persistence on compromised Windows systems. According to a new research from Fortinet’s FortiGuard...
BleepingComputer · · Medium severity
A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their system login password.
TechRadar · · Medium severity
Russian hacker turns Gemini CLI into a hacking agent, creates small-scale botnet
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free