A new and highly destructive malware, dubbed Lotus Wiper, has been identified actively targeting organizations within Venezuela’s energy and utilities sector. Unlike typical ransomware that extorts victims for financial gain, this sophisticated threat is designed purely for destruction, permanently wiping drives and deleting files in a manner that makes data…

A new and previously undocumented remote access trojan (RAT) framework, dubbed Auraboros C2, has been discovered, posing a significant threat due to its open command-and-control (C2) panel that grants unauthenticated access to victim data and live surveillance capabilities. The framework also specializes in stealing browser credentials through cookie hijacking. The…

The Supreme Court will hear oral arguments Monday in Chatrie v. The United States, a case that could significantly impact the government’s ability to obtain bulk digital data using a single warrant. This marks a rare instance of the nation’s highest court deliberating on digital rights and the Fourth Amendment…

A sophisticated new backdoor malware, identified as DinDoor, is employing the legitimate Deno JavaScript runtime and Windows Installer (MSI) packages to evade detection and infiltrate targeted systems. This novel approach allows the malware to bypass traditional security measures by leveraging trusted execution environments. DinDoor’s emergence highlights an evolving threat landscape…

A concerning supply chain attack has been discovered within the npm ecosystem, where malicious versions of packages from Namastex.ai are propagating a sophisticated backdoor malware known as CanisterWorm. This malware, exhibiting characteristics similar to the operations of the threat actor group TeamPCP, silently replaces legitimate code with infectious payloads and…

A sophisticated espionage campaign targeting India’s banking sector has been uncovered, with threat actors leveraging a trusted Microsoft-signed binary to infiltrate systems using the LOTUSLITE malware. This discovery highlights a concerning trend of state-linked groups employing advanced techniques to bypass security measures and execute stealthy cyber operations. The campaign, identified…

A new and sophisticated malware campaign employing the PureRAT remote access trojan (RAT) has been identified, targeting Windows systems with a novel approach to stealth. This campaign is notable for its ability to conceal malicious Portable Executable (PE) payloads within seemingly innocuous PNG image files, executing them entirely in memory…

A new and significantly more dangerous iteration of the NGate malware has been discovered, cunningly concealed within a compromised Near Field Communication (NFC) payment application. Researchers suggest that threat actors may have leveraged artificial intelligence in developing this malicious code, signaling a critical evolution in cybercriminal tactics and tools. This…

Cybersecurity researchers have identified a sophisticated phishing campaign targeting software developers by exploiting GitHub’s notification system to deploy malicious OAuth applications. This new threat leverages GitHub’s trusted infrastructure, making it exceptionally difficult for developers to distinguish legitimate security alerts from phishing attempts. The attack aims to gain unauthorized access to…

Artificial intelligence is rapidly transforming the cybersecurity landscape, with new frontier AI models demonstrating a growing ability to identify software vulnerabilities, understand intricate attack paths, and execute intrusions with significantly reduced human effort. This advancement poses a critical threat to the traditional “patch window,” the crucial time buffer between a…

A new, highly organized ransomware-as-a-service (RaaS) operation known as “The Gentlemen” is rapidly expanding its reach, targeting corporate networks globally. Appearing around mid-2025, the group has publicly claimed over 320 victims, with a significant surge in attacks—more than 240—recorded in the early months of 2026. This rapid growth suggests effective…

A sophisticated phishing campaign orchestrated by the advanced persistent threat (APT) group SideWinder is actively targeting South Asian government entities, employing deceptive tactics to pilfer sensitive webmail credentials. The group is leveraging a convincing fake Chrome PDF viewer and a meticulously crafted replica of the Zimbra email login portal, according…