A sophisticated malware loader, dubbed CastleLoader, is posing a significant threat to United States government agencies and critical infrastructure organizations. Identified in early 2025, this stealthy malware has been instrumental in coordinated cyberattacks across North America and Europe, impacting federal agencies, IT firms, logistics companies, and essential service providers. Security…

Large language models (LLMs) are revolutionizing the ransomware landscape, significantly accelerating the existing attacks from initial reconnaissance to final extortion. Rather than devising entirely new malware, cybercriminals are leveraging LLMs to enhance the speed, volume, and multilingual reach of their operations. This shift means ransomware crews can now generate sophisticated…

California Attorney General Rob Bonta announced an investigation Wednesday into xAI over allegations that its artificial intelligence model Grok is being used to create nonconsensual sexually explicit images of women and children on a large scale, marking the latest escalation in regulatory efforts to address AI-generated deepfakes. The California investigation…

North Korean hackers are employing a sophisticated social engineering tactic known as the “Contagious Interview” campaign, targeting software developers with deceptive recruitment offers that hide malicious code. This cyber threat leverages fake job postings and technical assessment projects to trick unsuspecting victims into downloading compromised code repositories, ultimately aiming to…

New research from Jamf Threat Labs reveals that Predator spyware operators can now precisely identify why an infection attempt has failed, due to a sophisticated error code system. This technology possesses advanced capabilities for evading detection that were previously unknown, according to analysis of a Predator sample published Wednesday. The…

Researchers have successfully broken down the DragonForce ransomware, a sophisticated threat that has transitioned from underground forums to a full-fledged Ransomware-as-a-Service (RaaS) operation. This newly identified RaaS group is actively targeting both Windows and VMware ESXi environments, posing a significant risk to organizations globally. The group’s emergence in December 2023…

Threat actors have launched a sophisticated charity-themed malware campaign targeting Ukraine’s Defense Forces, exploiting the goodwill surrounding humanitarian aid to deploy malicious software. Operating between October and December 2025, the cybercriminals distributed PLUGGYAPE, a Python-based backdoor designed to compromise military personnel and gain access to sensitive information. This campaign highlights…

Microsoft announced Wednesday that it collaborated with international law enforcement to seize infrastructure associated with the cybercrime service RedVDS. The company also initiated civil actions in the United States and the United Kingdom to prevent further misuse of the service, which has facilitated significant fraud. RedVDS has been linked to…

Discord users are currently facing a significant cybersecurity threat from a sophisticated piece of malware known as VVS Stealer. This information-stealing program, written in Python, is designed to pilfer sensitive account credentials and active session tokens from unsuspecting users. The malware was actively marketed on Telegram as early as April,…

Fortinet has issued critical security updates to address a severe OS command injection vulnerability (CVE-2025-64155) in its FortiSIEM product. This flaw, rated 9.4 out of 10.0 on the CVSS scale, could allow unauthenticated attackers to execute arbitrary code on vulnerable systems through crafted network requests, posing a significant risk to…

Researchers from Alias Robotics and Johannes Kepler University Linz have introduced a novel game-theoretic AI designed to enhance cybersecurity operations by guiding both offensive and defensive strategies. This innovative approach, named Generative Cut-the-Rope (G-CTR), automates the process of transforming raw AI security logs into structured attack graphs and subsequently computes…

Microsoft has released its first significant security update of 2026, addressing a substantial number of vulnerabilities. The January Patch Tuesday addresses 114 security flaws, with eight classified as Critical and 106 as Important. Notably, one vulnerability has been actively exploited in the wild, prompting urgent attention from cybersecurity professionals worldwide.…