Talos finds NIK C2 Windows implant that spends victims' OpenAI keys
The Go implant dumps credentials, captures keystrokes, and can lock screens with ransomware while calling an OpenAI model on the host.
62
Product
ClamAV
- Mentions · 7d0
- Mentions · 30d3
- All mentions6
- First seenAug 11, 2026
- Last mentioned10d ago
Timeline
6 articles · newest firstPaper proposes shielding antivirus signatures from black-box extraction
On a ClamAV prototype, Robust Embedding Matching raised probing queries by up to 282.57 times with under 0.1% added false positives.
38
The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Talos says 2026 CVE volume passed 70,000 while KEV growth lagged, so discovery is not exploitation.
58
USN-8788-1: ClamAV vulnerabilities
ClamAV contains multiple denial-of-service vulnerabilities allowing remote crashes via crafted archive and document files.
45
ClamAV Vulnerabilities Affecting Cisco Products: August 2026
Cisco patched ClamAV vulnerabilities that allow remote attackers to cause denial-of-service conditions, rated High only for Windows-based platforms.
35
Cisco Warns of Seven ClamAV Flaws, Two With Public PoCs
Cisco warns of seven ClamAV denial-of-service flaws in Secure Endpoint Connector, two with public PoCs; patches due in August.
45
Related CVEs
by mentions- CVE-2026-20339<1%7.5A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded…
- CVE-2026-20337<1%7.5A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device
- CVE-2026-20338<1%7.5A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device
- CVE-2026-20345<1%7.5A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded…
- CVE-2026-10493589%8.6Auth Bypass to Command Execution in Ivanti Connect Secure
- CVE-2026-20348<1%7.5A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded…
- CVE-2026-20347<1%7.5A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded…
- CVE-2026-20346<1%7.5A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded…
Appears with
- Ciscovendor · 3
- Cisco Talosorganization · 2
- ClamAVvendor · 2
- SonicWallvendor · 1
- GitHubproduct · 1
- ClamAVmalware · 1
- Connect Secureproduct · 1
- UAT-6275threat actor · 1
- SonicWall SMAproduct · 1
- ShinyHuntersthreat actor · 1
- Cisco productsproduct · 1
- WinRARproduct · 1
- Ivantivendor · 1
- FBIorganization · 1
- Canadian Centre for Cyber Securityorganization · 1
- Cisco PSIRTorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.