UPDATED
AlienVault OTX · · High severity
KGB RAT is a Windows Remote Access Trojan actively promoted on underground forums since late 2025, marketed deceptively as a legitimate administration tool. Sold through a Malware-as-a-Service model with pricing from $150 to $800, it...
The Hacker News · · Medium severity
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of...
BGR · · Medium severity
Phones are getting more expensive, making cheaper alternatives that much more appealing. But it gets risky when you buy no-name knockoffs.
TechRadar · · Medium severity
Experts uncover bizarre new malware that spooks users with jump scares and screams
BleepingComputer · · Medium severity
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
AlienVault OTX · · Medium severity
The Aoki infostealer has evolved to target credentials from AI coding assistants including Claude, OpenAI's Codex, Cursor, Codeium and Gemini. This capability represents a recent addition, as earlier versions did not target AI-related...
Help Net Security · · Medium severity
A Windows trojan advertised on hacking forums for as little as $150 a month promises buyers access to a victim’s webcam, microphone, keystrokes and saved passwords, and comes with a set of features made to frighten the person on the...
Help Net Security · · Medium severity
Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are...
Malwarebytes Labs · · Medium severity
Maybe it’s a text saying your package couldn’t be delivered, with a link to reschedule. Or an email from your bank asking you to verify your account. Or perhaps it’s an invitation from someone you know to view a document.
Infosecurity Magazine ·
Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini
The Register · · Medium severity
Welcome, once again, to PWNED, the weekly column where we gawk at organizations that have made serious security mistakes. Normally, we’re talking about businesses or maybe the odd school that messes up, but today we’re writing about a...
SecurityWeek · · Medium severity
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies appeared first on SecurityWeek .
OpenAI News · · Medium severity
With OpenAI Daybreak, SentinelOne cuts weeks of malware analysis to hours, creating capacity to investigate more threats.
Infosecurity Magazine · · Medium severity
Researchers at Forescout said the discovery shows how ClickFix is evolving from a delivery technique into full-blown cyber-criminal infrastructure
AlienVault OTX · · Critical severity
This analysis examines attacks against Windows web servers during Q3 2026, focusing on Internet Information Services (IIS) and Apache Tomcat environments. Attackers exploited unpatched vulnerabilities, misconfigurations, and weak...
AlienVault OTX · · Medium severity
During the third quarter of 2026, attackers targeted MS-SQL and MySQL servers on Windows systems through multiple attack vectors including brute-force attacks, dictionary attacks, and vulnerability exploitation. Threat actors deployed...
AlienVault OTX · · Medium severity
During Q3 2026, honeypot monitoring revealed attacks targeting poorly managed Linux SSH servers through brute force and dictionary attacks. Primary malware families included ShellBot (also known as PerlBot), a Perl-based DDoS bot with...
AlienVault OTX · · Medium severity
A phishing campaign has been observed distributing AgentTesla infostealer through emails masquerading as business proposal requests. Recipients are asked to review an attached product list, but the ZIP file contains an executable file...
BleepingComputer · · Medium severity
A new Android malware called Hirudo steals bank account credentials by replacing legitimate banking apps with modified versions that disable security checks.
The Hacker News · · Medium severity
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app...
Seqrite Blog · · Medium severity
Malware is becoming increasingly sophisticated, making it difficult for organizations to detect emerging threats using traditional signature-based security tools alone. Attackers use techniques such as code obfuscation, polymorphism,...
AlienVault OTX · · Medium severity
During the third quarter of 2026, multiple attack campaigns targeted poorly managed Linux SSH servers using brute force, dictionary attacks, and vulnerability exploits. Threat actors deployed ShellBot, a Perl-based DDoS bot, utilizing...
The Hacker News ·
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said...
TechRadar · · Medium severity
Hackers turn business backup servers into crypto mines after sneaking malware disguised as Microsoft Edge
TechRadar · · High severity
Over 8.7 million karaoke fans at risk after major data breach — Japanese giant Nippon Columbia says malware infection was to blame for exposing records
The Hacker News · · Medium severity
Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which...
TechRadar · · Medium severity
Experts warn cheap Android phones are being shipped with malware built in, so be on your guard
The Hacker News · · High severity
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it.
BleepingComputer · · Medium severity
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based...
Help Net Security · · Medium severity
People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices...
Hacker News · · Medium severity
BleepingComputer · · Medium severity
Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records.
Cybersecurity Dive - Latest News · · Critical severity
The infrastructure supported an international hacking campaign that targeted critical infrastructure, including a South Carolina-based power company.
SecurityWeek · · Medium severity
Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry. The post In Other News: AI Used in Korean Bank Breaches,...
SecurityWeek · · Medium severity
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices. The post Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries appeared first on SecurityWeek .
AlienVault OTX · · Medium severity
Warden Stealer is an emerging Rust-based infostealer-as-a-service that has rapidly become one of the most prevalent threats, distributed via malware-as-a-service model since August 2026. Unlike most competitors, it includes a dedicated...
AlienVault OTX · · Medium severity
In July 2026, Zscaler ThreatLabz uncovered a sophisticated campaign utilizing a trojanized Terraform provider to deliver cross-platform malware targeting cryptocurrency and Web3 developers. The attack begins with a malicious Terraform...
AlienVault OTX · · Medium severity
Threat actors are conducting email campaigns targeting the accommodation industry using fake guest complaints, reviews, and inquiries. These emails deliver malicious LNK shortcut files disguised as images, which ultimately deploy...
BleepingComputer · · Medium severity
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn...
darkreading · · Medium severity
The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operations with cash.
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free