Malware & Exploits

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

117stories this week

16today

the last seven days

Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security

In the news hereMicrosoft8 Fortinet6 Linux6 GitHub5 Lazarus2 APT411 APT29 (Cozy Bear)1 Lumma Stealer1

AI Accounts Are Becoming the New Target for Infostealers

September 28, 2026

AI in Cybersecurity, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

Infostealers are exposing corporate AI accounts, sessions and API keys, giving attackers access to sensitive data, compute and connected systems. SOCRadar analyzed stealer log data from the last 90 days and found 482 companies with exposed AI accounts and credentials. Of those, 295 appeared in active logs during that period, suggesting the exposure is recent…
Security Affairs
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix

September 28, 2026

AI Attacks & Abuse, Enterprise & Cloud Security, Malware & Exploits, SOC & SIEM, AI & Emerging Technology, Threat Intelligence

Huntress researchers reveal how attackers are exploiting ChatGPT Custom GPTs to spread ClickFix lures and DLL-sideloaded malware. See the full breakdown.
Huntress
Exploited
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

September 28, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The…
The Hacker News
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

September 28, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget’s wallet system.…
The Hacker News
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

September 28, 2026

AI Attacks & Abuse, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, AI & Emerging Technology, Threat Intelligence

RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware…
The Hacker News
Chrome Store Hosts ‘Poper Blocker’ Spyware Downloaded by Millions

September 28, 2026

Global Cyber Security, Malware & Exploits, Nation-State Threats, Threat Intelligence

A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google’s stamp of approval despite researcher warnings.
Dark Reading
Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts

September 28, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Security teams received urgent calls to disconnect servers before authorities confirmed critical zero-day flaws.
Cybersecurity Dive
NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

September 28, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, Threat Intelligence

Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom loaders, encrypted archives, and extensible components to maintain long-term access and support follow-on operations.
Microsoft
28th September – Threat Intelligence Report

September 28, 2026

Malware & Exploits, Threat Intelligence

For the latest discoveries in cyber research for the week of 28th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The FBI has confirmed unauthorized activity affecting FBIjobs.gov after the ShinyHunters group defaced the website. The group claimed to have stolen employee and applicant information and shared samples of purported FBI personnel…
Check Point Research
UK
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

September 28, 2026

Malware & Exploits, UK Government & NCSC, UK Cyber Security News, Threat Intelligence

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
NCSC
The devil is still in the email – but wears a new mask

September 28, 2026

Malware & Exploits, Threat Intelligence

When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack…
ESET WeLiveSecurity
Exploited
U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

September 28, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-88771 (CVSS score: 9.5) is a remote code execution vulnerability caused by improper input validation that could allow an…
Security Affairs

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Malware & Exploits

Stay ahead in Cyber Security.