UPDATED
TechRadar · · Medium severity
Cisco routers are being turned into surveillance vantage points to hoover up data on trusted networks — and it's all thanks to this new malware
TechRadar · · Medium severity
Careful when filing your taxes, this new "PackClient" malware is hitting global firms via tax audit lures
AlienVault OTX · · Medium severity
Mirage Kitten, an APT group historically focused on the Middle East and Africa, has deployed two previously undocumented cross-platform remote access trojans: NodeRabbit (Node.js-based) and PollCat (JavaScript-based). Both malware...
The Record by Recorded Future · · Medium severity
In a report published Tuesday, Kaspersky said it first discovered NodeRabbit on a system in Afghanistan and later identified variants on systems in Egypt and Ethiopia.
Help Net Security · · Medium severity
A malicious GitHub repository impersonating Anthropic and claiming to offer free access to “Claude Opus 5” is delivering RevStealer, Windows information-stealing malware that targets passwords, cryptocurrency wallet data and login...
Malwarebytes Labs · · Medium severity
Anthropic has warned some Claude users that criminals are using information stealers to take over their accounts. Rather than guessing passwords or intercepting two-factor authentication (2FA) codes, the attackers steal the browser...
TechRadar · · Medium severity
New ClickFix campaign can deploy powerful multi-stage malware directly through Windows Terminal and PowerShell
The Hacker News · · Medium severity
Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence...
SANS Internet Storm Center · · Medium severity
Introduction On Monday 2026-08-31, I used a link from a malicious Brazilian Portuguese email to infect a Windows host in my lab. This was a Guildma (Astaroth) malware infection. The link from the email is geofenced for Brazil, meaning...
darkreading · · Medium severity
A threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to an unknown number of users.
PYMNTS.com · · Medium severity
Cybercriminals are targeting users of Anthropic’s Claude artificial intelligence (AI) platform with malware that can steal authenticated login sessions, potentially allowing attackers to access accounts without passwords or two-factor...
The Register · · Medium severity
An unknown miscreant is using "TerminalFix" to trick unsuspecting users into running PowerShell commands that infect their computers with a reverse tunnel granting attackers access to their networks. Some of the malware is even hidden...
CIO.com ·
Lunar Cyber today announced Token Exposure Monitoring , a new capability designed to identify, attribute and validate Non-Human Identities (NHI) and machine credentials inside infostealer logs, connect them to the affected organization,...
The Security Ledger ·
Bnei Brak, Israel, 31st August 2026, CyberNewswire The post Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI Credentials appeared first on The Security Ledger with Paul F.
HackRead · · Medium severity
TerminalFix uses fake Cloudflare CAPTCHA pages to trick users into running PowerShell malware, creating reverse tunnels that provide access to internal systems.
SecurityWeek · · Medium severity
The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage. The post Anthropic Warns Claude Users of Infostealer Malware Infections appeared first on SecurityWeek .
HackRead · · Critical severity
The FBI and DOJ disrupted a global botnet used by QTFY to compromise IoT devices and conceal attacks against US government agencies and critical infrastructure.
Help Net Security · · Medium severity
Anthropic has started locking users out of their Claude accounts due to their login sessions having been compromised through infostealer malware. “The malware identified in this campaign so far include Vidar, Lumma (LummaC2), StealC,...
AlienVault OTX · · Medium severity
Cybercriminals are exploiting the hype surrounding Grand Theft Auto VI by creating fake Rockstar Games websites that appear in search results offering a GTA 6 demo. These sites impersonate legitimate promotional material for Rockstar's...
AlienVault OTX · · High severity
Analysis of over 400 AI-integrated malware samples reveals that approximately 97% exist only in research repositories and sandboxes, never reaching production environments. Of 405 samples examined, only 12 appeared on protected...
AlienVault OTX · · Medium severity
A sophisticated phishing operation initially appearing to target Canadians with fake Canada Revenue Agency T4 tax documents has evolved into a global campaign spanning 46 countries, with 45% of activity concentrated in the United...
AlienVault OTX · · Medium severity
During a targeted intrusion investigation in June 2026, investigators uncovered GoCaracal, a previously undocumented modular framework written in Go. This sophisticated toolkit exists in two operational profiles: a lightweight implant...
AI coding token costs are on track to rival human payroll | InfoWorld · · Medium severity
Malicious versions of three Rust packages, including the widely used arrayref, were published to the crates.io registry on August 20, carrying a backdoor that executed automatically when affected projects were compiled. Security...
darkreading · · Medium severity
The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk.
darkreading · · Medium severity
ClickFix-style threat campaigns are using a new trick to evade detection and deliver Amatera, an increasingly prevalent infostealer.
darkreading · · Medium severity
Threat actors behind a notorious click-fraud botnet have set their sights on vehicle infotainment modules and are abusing legitimate functionality to spread infections.
darkreading · · Medium severity
GoCaracal is a new modular malware framework that broadens Dark Caracal's capabilities to steal data and maintain access to victims.
TechCrunch Security · · Medium severity
Grand Theft Auto fans, eager for news about one of the most anticipated video games of all time, appear especially vulnerable to this new cyberattack.
TechCrunch Security · · Medium severity
The Justice Department said that the domain seizures made the botnet and its command and control servers "inoperable," as the domains were hardcoded into the botnet's code and were critical for the botnet's communication and essential...
Palo Alto Unit 42 · · Medium severity
Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup routing. The post Kimwolf v7: An Evolution of the Kimwolf Botnet appeared first on Unit 42 .
Palo Alto Unit 42 · · Medium severity
Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored code before execution. The post The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic...
Malwarebytes Labs · · Medium severity
GTA 6 footage really has leaked online, and Rockstar has an official Extended Look coming to Netflix on August 27. But cybercriminals are exploiting the hype with fake Rockstar sites that lead visitors to password-stealing malware. We...
Help Net Security · · Medium severity
Russian state hackers are trying to interfere with AI-assisted malware analysis in Ukraine by deliberately setting off AI safety mechanisms, ESET has found. The technique, named GuardBreaker by ESET, appeared in a malicious VBS script...
The Security Ledger · · Medium severity
Cybercriminals used to hacking home routers and security cameras have found another Internet-connected device to add to their botnets: your car, according to research published by Kaspersky Lab. The post Malware Takes the Wheel:...
Infosecurity Magazine · · Medium severity
Fake Codex pages used Google Sites, sponsored search and ClickFix to target Mac users
Infosecurity Magazine · · Medium severity
A threat actor keeps spreading the WeedHack malware to Minecraft players despite its original infrastructure taken down in July
Infosecurity Magazine · · Medium severity
Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool
CSO Online Security · · Medium severity
Malicious versions of three Rust packages, including the widely used arrayref, were published to the crates.io registry on August 20, carrying a backdoor that executed automatically when affected projects were compiled. Security...
The Hacker News ·
Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing AI, command traffic hiding in public infrastructure, malicious tools waiting before showing their...
TechSpective · · Medium severity
Malware hits your network — and by that point, attackers have already done the hard work. Cybersecurity conversations tend to fixate on blocking malicious code, but that framing misses something critical. The bulk of successful […] The...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free