Tag: threat intelligence

CISA has added the actively exploited N-able N-central authentication bypass vulnerability CVE 2026 18577 to its KEV catalog following customer compromises and reports of ongoing attacks.

Researchers report that the Dysphoria IoT botnet has adopted blockchain based name services and infected device relays after law enforcement disrupted JackSkid infrastructure, making the botnet more resilient.

Resecurity Pakistan has signed an MOU with Skills Share Hub to deliver hands on cybersecurity training focused on threat intelligence, incident response, and digital risk management.

Cisco Talos has uncovered msaRAT, a Rust based malware used by Chaos ransomware that leverages headless Chrome and Edge browsers with WebRTC to conceal command and control communications.

Researchers have uncovered the FakeGit campaign using nearly 7,600 malicious GitHub repositories, including AI skills and MCP servers, to distribute SmartLoader and StealC malware.

Kaspersky researchers have uncovered the OkoBot malware framework, which injects phishing pages into Ledger and Trezor desktop applications to steal cryptocurrency wallet recovery phrases from Windows users.

Researchers have uncovered LabubaRAT, a Rust based remote access trojan disguised as NVIDIA software that enables attackers to control Windows systems through multiple communication channels.

Researchers have uncovered a large scale operation by threat actor Lurking Lizard, which uses fake 7 Zip installers and lookalike websites to turn victim devices into residential proxy nodes.

This week's cybersecurity roundup covers the disruption of the NetNut proxy botnet, AI driven attack techniques, browser based ransomware, phishing campaigns, malware activity, and critical vulnerabilities affecting organizations worldwide.

This ThreatsDay roundup covers ransomware phishing campaigns, sandbox escapes, Apple email vulnerabilities, Linux kernel privilege escalation flaws, AI compute hijacking, and large scale malware operations affecting enterprise and consumer systems worldwide.

A U.S. government entity reportedly paid $1 million to Kairos in a data theft extortion case involving stolen files, blockchain tracked payments, and encryption free ransomware tactics targeting sensitive county records.

Kaspersky has uncovered a large scale SEO poisoning campaign that uses fake software websites and ScreenConnect to deploy AsyncRAT, enabling remote access, data theft, and persistent compromise of Windows systems.