Malware & Exploits

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

117stories this week

16today

the last seven days

Most fromThe Hacker News, BleepingComputer, SecurityWeek, Help Net Security

In the news hereMicrosoft9 GitHub6 Fortinet6 Google6 Lazarus2 APT411 APT29 (Cozy Bear)1 Lumma Stealer1

MacSync under the microscope: new delivery methods and a new payload

September 24, 2026

Malware & Exploits, Threat Intelligence

We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and developers.
Securelist (Kaspersky)
New Android malware RemControl steals banking PINs and blocks removal attempts

September 24, 2026

Malware & Exploits, Threat Intelligence

A new Android banking trojan called RemControl tricks victims into installing a fake TV app, then takes control of their phones to steal banking PINs, Group-IB has found. Researchers confirmed that the malware targets customers of more than 30 banks in Italy, France, Spain, Poland, Portugal, Canada and some Gulf states. The first samples were…
Help Net Security
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

September 24, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructure and a state-sponsored user base, and explains why…
The Hacker News
Been told to pay at a Bitcoin ATM? Read this first

September 24, 2026

Malware & Exploits, Threat Intelligence

Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out…
ESET WeLiveSecurity
Exploited
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

September 24, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). “An unauthenticated attacker can make get_page_template() page-template resolution include a chosen readable local .php file…
The Hacker News
SASE Converges Network & Security Into One Cloud Solution

September 23, 2026

Malware & Exploits, Threat Intelligence

Enterprise computing is moving to the edge. Keeping it secure requires tactics far beyond putting up firewalls. (Second in a three-part series.)
Dark Reading
EDR Evasion Stack Helps Process Injection Slip Past Defenses

September 23, 2026

Enterprise & Cloud Security, Malware & Exploits, SOC & SIEM, Threat Intelligence

A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.
Dark Reading
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

September 23, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.
Dark Reading
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

September 23, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads. According to Aikido, the list of Terraform providers and Go modules is below – gocommunity-io/dockerd (222 downloads) kreuzwenker/…
The Hacker News
UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks

September 23, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

The United Arab Emirates and Kingdom of Saudi Arabia together absorbed 50% of all cyberattacks recorded across the Gulf region in the first half of 2026.
Dark Reading
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign

September 23, 2026

AI Attacks & Abuse, Malware & Exploits, Phishing & Scams, AI & Emerging Technology, Threat Intelligence

Threat actors are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.
Dark Reading
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

September 23, 2026

AI Attacks & Abuse, Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Microsoft Security, AI & Emerging Technology, Threat Intelligence

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker’s server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to…
The Hacker News

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Malware & Exploits

Stay ahead in Cyber Security.