Collaborate Disseminate
TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access. Continue reading New TASK#STOMP Windows Backdoor Enables Continuous Document Theft
FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screenshots and evades security tools. Continue reading China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America
Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server. Continue reading ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers
Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services. Continue reading “I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails
Brazil’s SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection. Continue reading Brazil Health Surveillance Database Exposed 79GB of Sensitive Records
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time. Continue reading Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files. Continue reading Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software
A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and trusted websites to bypass security filters. Continue reading Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware
A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. While… Continue reading Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection
Canadian hacktivist Aubrey Cottle, known as Kirtaner and once linked to Anonymous, gets 18 months for a 2021 Texas GOP website cyberattack. Continue reading Anonymous-Linked Hacktivist Aubrey Cottle Jailed Over Texas GOP Cyberattack