Cybercriminals are weaponizing over 2,500 legitimate security tools to disable endpoint protection before deploying ransomware and remote access malware. This sophisticated campaign leverages a trusted Windows security driver, known as truesight.sys from Adlice Software’s RogueKiller antivirus, to systematically shut down critical security defenses on compromised systems. The technique allows attackers…

Cybersecurity researchers have uncovered a sophisticated new attack campaign where threat actors are leveraging weaponized PNG files to stealthily deliver the PURELOGS infostealer. This commodity malware, readily available on underground forums, is being distributed through a multi-stage attack chain that bypasses traditional security measures by hiding its payload within seemingly…

A sophisticated new social engineering technique, dubbed GlitchFix, is leveraging a specialized traffic distribution system known as ErrTraffic to lure unsuspecting users into downloading malware. This deceptive campaign weaponizes visually distorted web pages, creating a false sense of urgency that prompts users to install malicious remote monitoring and management (RMM)…

Tech giants Zoom and GitLab have recently issued urgent security updates to address a constellation of critical vulnerabilities. These patches aim to neutralize threats that could compromise user data through denial-of-service (DoS) attacks and even enable remote code execution. The rapid response highlights the ever-evolving landscape of network security and…

A new Magecart-style campaign is actively targeting online shoppers by injecting malicious JavaScript code into e-commerce websites. This sophisticated attack aims to steal sensitive payment information directly from customers during the checkout process, posing a significant threat to both consumers and online retailers. The ongoing campaign highlights the persistent evolution…

North Korean threat actors have significantly evolved their attack strategies, now extensively abusing Microsoft Visual Studio Code to execute malicious payloads on victim systems. This “Contagious Interview” campaign represents a concerning shift from traditional social engineering to exploiting trusted development environments, targeting developers directly with sophisticated malware delivery. Researchers have…

Organizations are currently facing a significant cybersecurity threat as malicious actors are weaponizing ordinary-looking shipping documents to distribute Remcos, a powerful remote access trojan (RAT). This sophisticated phishing campaign utilizes fake shipping emails as its entry point, deceiving unsuspecting users into opening compromised Word documents that appear to be legitimate…

Critical security vulnerabilities have been uncovered within the popular open-source artificial intelligence (AI) framework Chainlit, potentially exposing organizations to significant data breaches and lateral movement attacks. These newly identified flaws, collectively named ChainLeak, could allow attackers to steal sensitive cloud API keys and confidential files, or execute server-side request forgery…

A sophisticated phishing campaign is actively targeting corporate employees by exploiting LinkedIn, a trusted professional networking platform, to distribute a dangerous remote access trojan (RAT). Attackers are leveraging the platform’s credibility to craft convincing messages that increase the likelihood of employees downloading and executing malicious files, posing a significant threat…

A critical security vulnerability has been disclosed in the widely-used open-source JavaScript library, binary-parser, potentially allowing attackers to execute arbitrary JavaScript code on affected systems. The flaw, identified as CVE-2026-1245, impacts all versions of the npm module released before version 2.3.0, which was issued to address the security concern. This…

The Cybersecurity and Infrastructure Security Agency (CISA) has released a comprehensive malware analysis report detailing BRICKSTORM, a sophisticated backdoor associated with Chinese state-sponsored cyber operations. This cybersecurity threat specifically targets VMware vSphere platforms, including vCenter servers and ESXi environments, posing a significant risk to organizations in government services and the…

Apstec Systems has unveiled its latest innovation, Apstec Merlin, an artificial intelligence-powered metal detection system designed to significantly streamline security screening processes. The new technology, which debuted at Intersec Dubai 2026, aims to set a new benchmark for non-invasive security screening by identifying metallic threats without requiring individuals to remove…