Malware & Exploits

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

127stories this week

27today

the last seven days

Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security

In the news hereMicrosoft8 Fortinet6 GitHub5 Linux4 Lazarus2 APT411 APT29 (Cozy Bear)1 Lumma Stealer1

XWorm RAT Evolves Into Surveillance Platform

October 13, 2026

Enterprise & Cloud Security, Malware & Exploits, SOC & SIEM, Threat Intelligence

Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
SecurityWeek
XWorm RAT Evolves Into Surveillance Platform

October 13, 2026

Enterprise & Cloud Security, Identity & Access Management, Malware & Exploits, Threat Intelligence

Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
SecurityWeek
Over 1,500 npm packages exposed by Trusted Publishing validation flaw

October 13, 2026

AI in Cybersecurity, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

A flaw in npm’s Trusted Publishing mechanism could allow attackers to hijack legitimate software packages by reclaiming abandoned GitHub repository names, potentially exposing millions of package downloads to supply-chain attacks. Researchers at Bloom Security identified more than 1500 potentially vulnerable npm packages, including security scanners, authentication tools, and cryptographic packages. The vulnerability, dubbed SlugFest, came…
CSO Online
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

October 13, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Two of 31 newly disclosed flaws in Progress Software’s MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic…
The Hacker News
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

October 13, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. “GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression…
The Hacker News
VMware is pushing so many patches, it thinks users need new tools to manage the flood

October 13, 2026

Malware & Exploits, UK Cyber Attacks, UK Cyber Security News, Threat Intelligence

It’s 2026 and Virtzilla reckons it’s OK to pay for MFA…
The Register
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

October 13, 2026

Botnets & C2, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under the moniker Midnight Mimosa. The preinstalled…
The Hacker News
RSVP to Disaster: How One Click Installs a RAT

October 13, 2026

Malware & Exploits, Phishing & Scams, Threat Intelligence

The Cofense Phishing Defense Center (PDC) uncovered a phishing campaign that disguises malware as a digital event invitation, exploiting recipients’ curiosity to lure them into downloading a malicious file. The attack uses a fake CAPTCHA and invitation page to deliver a legitimate ConnectWise ScreenConnect installer, which threat actors abuse as a remote access trojan (RAT)…
Cofense
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

October 12, 2026

Cyber Security News, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Dark Reading
CISA calls on Citrix NetScaler customers to patch as new flaws disclosed

October 12, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

A newly discovered critical vulnerability is adding to the workload of customers mitigating other recent flaws.
Cybersecurity Dive
GitLab fixes critical vulnerability that exposed software environments to sabotage

October 12, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

The company urged customers to upgrade to the latest versions of its flagship products.
Cybersecurity Dive
12th October – Threat Intelligence Report

October 12, 2026

Malware & Exploits, Threat Intelligence

For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Denmark’s government has disclosed a breach involving its Central Register of Persons after unauthorized individuals exploited access provided to a private supplier. The incident reportedly exposed personal information, including names, addresses, and…
Check Point Research

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Malware & Exploits

Stay ahead in Cyber Security.