A sophisticated new malware campaign dubbed “DeepLoad” is targeting enterprise IT environments, employing artificial intelligence to meticulously evade security controls and establish persistent, credential-stealing access, according to a report released Monday by ReliaQuest AI researchers. The DeepLoad malware arrives via social engineering tactics like fake browser prompts or error messages,…

A sophisticated Python-based malware, dubbed BlankGrabber, is intensifying its assault on everyday users by employing a deceptive certificate loader to conceal a complex, multi-stage infection chain. First observed in 2023, this information stealer has evolved to pilfer a broad spectrum of sensitive data, including browser credentials, session tokens, saved passwords,…

A significant security vulnerability, dubbed “Open Sesame,” has been uncovered in Open VSX, the widely utilized extension marketplace for code editors like Cursor and Windsurf, and the broader VS Code fork ecosystem. This flaw allowed malicious extensions to bypass the platform’s newly implemented pre-publish scanning pipeline, appearing to users as…

A sophisticated supply chain attack has compromised the Telnyx Python SDK, a widely used library downloaded by hundreds of thousands of developers monthly. Threat actor TeamPCP successfully injected malicious code into versions 4.87.1 and 4.87.2 of the Telnyx Python SDK, uploading them to the Python Package Index (PyPI) on March…

Cybercriminals are increasingly leveraging sophisticated homoglyph attack techniques to impersonate trusted domains and deceive users. These attacks exploit the visual similarity between characters across different alphabets, allowing attackers to create domain names and email addresses that appear legitimate but lead victims to malicious sites or prompt them to divulge sensitive…

A sophisticated cybercrime group, dubbed TeamPCP, has been actively targeting cloud environments since late 2025, deploying a self-propagating worm named CanisterWorm. This malware relentlessly seeks out misconfigured Docker APIs, Kubernetes clusters, and Redis servers, as well as systems vulnerable to the React2Shell flaw. Its primary objective is to gain unauthorized…

The cybersecurity world’s long-standing debate about the viability of AI-assisted malware has been definitively settled with the discovery of VoidLink, a sophisticated Linux-based malware framework. Revealed in early 2026, VoidLink demonstrates that AI-powered malware is no longer an experimental concept but a fully operational and advanced threat capable of sophisticated…

Japan’s tax season has become a prime hunting ground for a sophisticated threat actor known as Silver Fox. The cybercriminal group is exploiting the busy period of tax filing, salary reviews, and personnel changes by sending highly targeted spearphishing emails designed to mimic legitimate internal communications. This campaign, currently impacting…

A financial institution in South Asia has been targeted in a sophisticated cyberattack employing custom malware known as BRUSHWORM and BRUSHLOGGER. The operation highlights the escalating threat landscape for financial organizations across the region, as attackers leverage novel techniques for persistent system access and data exfiltration. The dual-malware approach underscores…

Financial institutions are facing a heightened cyber threat as threat actors intensify their use of PXA Stealer, an advanced information-stealing malware. This escalation follows significant law enforcement actions in 2025 that dismantled major infostealer operations like Lumma, Rhadamanthys, and RedLine. Analysts from CyberProof have identified a new campaign cluster, identified…

A new macOS malware, dubbed Infiniti Stealer, is stealthily targeting Mac users by impersonating legitimate Cloudflare CAPTCHA pages. This sophisticated threat leverages a social engineering tactic known as ClickFix, tricking users into executing malicious commands directly on their systems, thereby bypassing traditional software vulnerabilities. The discovery of Infiniti Stealer challenges…

A sophisticated new rootkit named VoidLink is posing a significant threat to Linux systems, leveraging a combination of Loadable Kernel Modules (LKMs) and extended Berkeley Packet Filter (eBPF) programs to embed itself deeply within the operating system’s core. First detailed by Check Point Research in January 2026, VoidLink is a…