Researchers Show Copilot and Grok Can Be Abused as Malware C2 ProxiesThe Hacker News·Feb 18, 09:49 UTC · Feb 18, 2026Malware30
MOS: Open-source modular OS for servers and homelabsHelp Net Security·Feb 16, 00:00 UTC · Feb 16, 2026Tools230
Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian OrgsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Malware30
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 VulnerabilityThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731CVE-2026-20700CVE-2025-15556+4 CVEs60
OpenAI released GPT-5.3-Codex-Spark, a real-time coding modelHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2026AI tools & infra130
⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and MoreThe Hacker News·Feb 9, 12:59 UTC · Feb 9, 2026MalwareCVE-2026-25049CVE-2026-0709CVE-2026-23795+23 CVEs160
OpenClaw Integrates VirusTotal Scanning to Detect Malicious ClawHub SkillsThe Hacker News·Feb 9, 07:27 UTC · Feb 9, 2026Vulnerability55
China-Linked Hackers Have Used the PeckBirdy JavaScript C2 Framework Since 2023The Hacker News·Jan 30, 06:48 UTC · Jan 30, 2026VulnerabilityCVE-2020-1604047
New Advanced Linux VoidLink Malware Targets Cloud and container EnvironmentsThe Hacker News·Jan 19, 08:54 UTC · Jan 19, 2026Malware55
PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense ForcesThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Malware42
CERT-UA reports PLUGGYAPE cyberattacks on defense forcesSecurity Affairs·Jan 14, 19:24 UTC · Jan 14, 2026Data breach57
DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users WorldwideThe Hacker News·Jan 1, 09:11 UTC · Jan 1, 2026Threat actor45
⚡ Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & MoreThe Hacker News·Dec 31, 05:07 UTC · Dec 31, 2025Malware in the wildCVE-2025-14847CVE-2020-12812CVE-2025-68664+7 CVEs260
New EtherRAT backdoor surfaces in React2Shell attacks tied to North KoreaSecurity Affairs·Dec 10, 14:45 UTC · Dec 10, 2025MalwareCVE-2025-5518260
Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft FeaturesThe Hacker News·Dec 8, 11:00 UTC · Dec 8, 2025Malware30
CISA Reports PRC Hackers Using BRICKSTORM for LongThe Hacker News·Dec 5, 09:15 UTC · Dec 5, 2025Exploit / PoCCVE-2023-46805CVE-2024-21887CVE-2024-38812+3 CVEs160
5 Threats That Reshaped Web Security This Year [2025]The Hacker News·Dec 4, 11:30 UTC · Dec 4, 2025VulnerabilityCVE-2025-54135CVE-2025-53109CVE-2025-5528460
Upwind adds real-time AI security and posture management to its CNAPPHelp Net Security·Dec 2, 00:00 UTC · Dec 2, 2025Vulnerability55
A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warnHelp Net Security·Nov 16, 15:28 UTC · Nov 16, 2025Exploit / PoC in the wildCVE-2025-6444660
China-Aligned UTA0388 Uses AI Tools in Global Phishing CampaignsInfosecurity Magazine·Nov 10, 16:00 UTC · Nov 10, 2025Threat actor45
Pakistani-Linked Hacker Group Targets Indian GovernmentInfosecurity Magazine·Oct 23, 16:30 UTC · Oct 23, 2025Malware30
Researchers Identify PassiveNeuron APT Using Neursite and NeuralExecutor MalwareThe Hacker News·Oct 22, 11:59 UTC · Oct 22, 2025Malware42
Cyberespionage campaign PassiveNeuron targets machines running Windows ServerKaspersky Securelist·Oct 21, 08:00 UTC · Oct 21, 2025Threat actor57
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & MoreThe Hacker News·Oct 20, 19:00 UTC · Oct 20, 2025Data breachCVE-2025-20352CVE-2025-48561CVE-2025-24990+18 CVEs160
BeaverTail and OtterCookie evolve with a new Javascript moduleCisco Talos·Oct 16, 10:00 UTC · Oct 16, 2025Malware130
Humanoid robot found vulnerable to Bluetooth hack, data leaks to ChinaHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2025Vulnerability55
From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage MalwareThe Hacker News·Oct 9, 17:19 UTC · Oct 9, 2025Malware42
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & MoreThe Hacker News·Oct 3, 04:59 UTC · Oct 3, 2025MalwareCVE-2024-3400CVE-2017-792160
Google warns of Brickstorm backdoor targeting U.S. legal and tech sectorsSecurity Affairs·Sep 26, 07:04 UTC · Sep 26, 2025Malware55
UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology SectorsThe Hacker News·Sep 25, 15:04 UTC · Sep 25, 2025MalwareCVE-2023-46805CVE-2024-2188760
Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage CampaignThe Hacker News·Aug 30, 11:54 UTC · Aug 30, 2025Threat actor57
PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta AdsThe Hacker News·Aug 10, 07:56 UTC · Aug 10, 2025Malware30
Researchers Uncover ECScape Flaw in Amazon ECS Enabling CrossThe Hacker News·Aug 7, 05:26 UTC · Aug 7, 2025VulnerabilityCVE-2025-156847
PlayPraetor Android RAT expands rapidly across Spanish and FrenchSecurity Affairs·Aug 4, 12:55 UTC · Aug 4, 2025Malware30
PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike DomainThe Hacker News·Jul 31, 10:03 UTC · Jul 31, 2025Threat actor45
Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile NetworksThe Hacker News·Jul 29, 11:10 UTC · Jul 29, 2025Ransomware45
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing AttackThe Hacker News·Jul 23, 10:41 UTC · Jul 23, 2025Malware42
SOC files: an APT41 attack on government IT services in AfricaKaspersky Securelist·Jul 21, 08:00 UTC · Jul 21, 2025Threat actor60
What LLMs Know About Their UsersSchneier on Security·Jul 14, 09:12 UTC · Jul 14, 2025AI tools & infra30