Threats

OysterLoader Multi-Stage Evasion Loader Uncovered with Advanced Obfuscation and Rhysida Ransomware Links

Threats February 13, 2026

A new and sophisticated malware loader named OysterLoader has been identified, posing a significant threat to cybersecurity. This advanced threat,…

Over 1,800 Windows Servers Compromised by BADIIS Malware in SEO Poisoning Campaign

Threats February 13, 2026

Over 1,800 Windows servers globally have been compromised by a sophisticated malware campaign dubbed BADIIS, which targets Internet Information Services…

DShield Sensor Detects Self-Propagating SSH Worm Exploiting Credential Stuffing and Multi-Stage Malware

Threats February 12, 2026

A sophisticated new self-propagating SSH worm has been identified by cybersecurity researchers, capable of completely compromising Linux systems within seconds…

DragonForce Ransomware Group Engages in Cartel-like Operations, Targets 363 Companies Since 2023

Threats February 12, 2026

The DragonForce ransomware group has emerged as a significant threat, operating since December 2023 under a sophisticated Ransomware-as-a-Service (RaaS) model.…

ORB Networks Utilizes Compromised IoT Devices and SOHO Routers to Conceal Cyberattacks

Threats February 12, 2026

Operational Relay Box (ORB) networks are an emerging cybersecurity threat, allowing threat actors to obscure their malicious activities by using…

WordPress Backup Plugin Vulnerability Poses Remote Code Execution Risk to 800,000 Sites

Threats February 12, 2026

A critical vulnerability within the WPvivid Backup & Migration WordPress plugin has exposed approximately 800,000 websites to high-risk remote code…

Rogue virtual machine linked to Libra attack reveals threat actor tactics, techniques, and procedures in VMware vSphere.

Threats February 12, 2026

A sophisticated cyberattack in September 2025 exploited a rogue virtual machine within a VMware vSphere environment, granting attackers entry and…

Netdragon Botnet Attack Exploits Unpatched Vulnerabilities in Feiniu NAS Devices

Threats February 12, 2026

Feiniu (fnOS) Network Attached Storage (NAS) devices are currently under a large-scale botnet attack, with the Netdragon malware exploiting unpatched…

Sophisticated ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware

Threats February 12, 2026

A sophisticated malware campaign has infiltrated the NPM package registry, with the malicious package named “duer-js” discovered by JFrog Security…

Lazarus Group uses ‘Graphalgo’ campaign to distribute malware via GitHub, npm, and PyPI

Threats February 12, 2026

The notorious Lazarus Group, a state-sponsored hacking collective linked to North Korea, has initiated a sophisticated new cyberespionage campaign dubbed…

Fake CAPTCHA Attacks Become Primary Entry Point for LummaStealer Malware

Threats February 12, 2026

LummaStealer, a notorious information-stealing malware, has resurfaced with a new and concerning distribution tactic: fake CAPTCHA verification pages. This resurgence…

Threat Actors Employ Employee Monitoring and SimpleHelp Tools for Ransomware Deployment

Threats February 12, 2026

Cybercriminals are increasingly leveraging legitimate employee monitoring and remote access tools, such as Net Monitor for Employees Professional and SimpleHelp,…

Trending

CISA adds actively exploited SolarWinds Serv-U DoS vulnerability to KEV catalog

AI Agent Discovers 21 Zero-Day Vulnerabilities in FFmpeg; Chrome Addresses 429 Bugs

Cisco Catalyst SD-WAN Manager Vulnerability Exploited, Patch Pending

Threats

OysterLoader Multi-Stage Evasion Loader Uncovered with Advanced Obfuscation and Rhysida Ransomware Links

Over 1,800 Windows Servers Compromised by BADIIS Malware in SEO Poisoning Campaign

DShield Sensor Detects Self-Propagating SSH Worm Exploiting Credential Stuffing and Multi-Stage Malware

DragonForce Ransomware Group Engages in Cartel-like Operations, Targets 363 Companies Since 2023

ORB Networks Utilizes Compromised IoT Devices and SOHO Routers to Conceal Cyberattacks

WordPress Backup Plugin Vulnerability Poses Remote Code Execution Risk to 800,000 Sites

Rogue virtual machine linked to Libra attack reveals threat actor tactics, techniques, and procedures in VMware vSphere.

Netdragon Botnet Attack Exploits Unpatched Vulnerabilities in Feiniu NAS Devices

Sophisticated ‘duer-js’ NPM Package Distributes ‘Bada Stealer’ Malware

Lazarus Group uses ‘Graphalgo’ campaign to distribute malware via GitHub, npm, and PyPI

Fake CAPTCHA Attacks Become Primary Entry Point for LummaStealer Malware

Threat Actors Employ Employee Monitoring and SimpleHelp Tools for Ransomware Deployment