Threats

Threat Actors Employ Fake BSODs and Trusted Build Tools to Evade Defenses and Deploy DCRat

Threats January 26, 2026

A sophisticated new malware campaign is actively targeting the hospitality industry by leveraging deceptive Blue Screen of Death (BSOD) warnings…

Cyberattackers exploit Mjobtime app vulnerability using MSSQL and IIS POST requests against construction firms.

Threats January 26, 2026

Construction firms are facing a new wave of cyber threats as attackers exploit vulnerabilities in job site business software. One…

Fake Captcha Ecosystem Exploits Trusted Web Infrastructure for Malware Delivery

Threats January 23, 2026

A sophisticated fake captcha ecosystem is exploiting trusted web infrastructure to deliver malware, posing a significant threat to internet users.…

Threat Actors Utilize LNK File to Deploy MoonPeak Malware on Windows Systems

Threats January 23, 2026

Threat actors are weaponizing LNK files to deploy the MoonPeak malware, a dangerous remote access trojan targeting Windows systems. This…

WordPress sites vulnerable to backdoor exploits enabling unauthorized administrator creation.

Threats January 23, 2026

A critical backdoor vulnerability has been discovered in the LA-Studio Element Kit for Elementor, a popular WordPress plugin utilized by…

Hackers Exploit GenAI to Rapidly Convert Clean Pages to Malicious Content

Threats January 23, 2026

Cybercriminals are now leveraging generative artificial intelligence (GenAI) to dynamically transform seemingly clean webpages into malicious phishing tools in real-time,…

MacSync Infostealer Employs ClickFix-Style Attack Targeting Terminal Command Pastes

Threats January 23, 2026

A new macOS malware named MacSync is posing a significant threat to cryptocurrency users, employing sophisticated social engineering tactics to…

Malware campaign targets EmEditor users with stealer infections

Threats January 23, 2026

A new watering hole attack is actively targeting developers who use EmEditor, a popular text editor widely adopted within Japanese…

New Phishing Kit as a Service Targets Google, Microsoft, and Okta Users

Threats January 23, 2026

A sophisticated new breed of phishing-as-a-service (PhaaS) kits specifically engineered for voice-based attacks poses a significant and escalating threat to…

North Korean hackers use AI for malware targeting developers and engineering teams

Threats January 23, 2026

North Korea-aligned hackers have adopted artificial intelligence (AI) to generate sophisticated malware, marking a significant escalation in their cyber warfare…

Proxyware Malware Masquerades as Notepad++ Tool, Exploits Windows Explorer Process

Threats January 23, 2026

A new and sophisticated malware campaign is underway, with threat actors disguising malicious proxyware as legitimate Notepad++ software tools. This…

Hackers Compromise Snap Domains to Poison Linux Software Packages

Threats January 22, 2026

Security vulnerabilities in the Canonical Snap Store have escalated, enabling hackers to distribute malicious software, including crypto-stealing applications, through the…

Trending

CISA adds actively exploited SolarWinds Serv-U DoS vulnerability to KEV catalog

AI Agent Discovers 21 Zero-Day Vulnerabilities in FFmpeg; Chrome Addresses 429 Bugs

Cisco Catalyst SD-WAN Manager Vulnerability Exploited, Patch Pending

Threats

Threat Actors Employ Fake BSODs and Trusted Build Tools to Evade Defenses and Deploy DCRat

Cyberattackers exploit Mjobtime app vulnerability using MSSQL and IIS POST requests against construction firms.

Fake Captcha Ecosystem Exploits Trusted Web Infrastructure for Malware Delivery

Threat Actors Utilize LNK File to Deploy MoonPeak Malware on Windows Systems

WordPress sites vulnerable to backdoor exploits enabling unauthorized administrator creation.

Hackers Exploit GenAI to Rapidly Convert Clean Pages to Malicious Content

MacSync Infostealer Employs ClickFix-Style Attack Targeting Terminal Command Pastes

Malware campaign targets EmEditor users with stealer infections

New Phishing Kit as a Service Targets Google, Microsoft, and Okta Users

North Korean hackers use AI for malware targeting developers and engineering teams

Proxyware Malware Masquerades as Notepad++ Tool, Exploits Windows Explorer Process

Hackers Compromise Snap Domains to Poison Linux Software Packages