Hackers Are Finding New Ways to Hide Malware in DNS Records
By Dan Goodin
Malware found embedded in DNS, the system that makes the internet usable, except when it doesn't
By Nathaniel Mott
It seems even DNS records can be infected with malware now - here's why that's a major worry
By Sead Fadilpašić
Hackers Exploit DNS Queries for C2 Operations and Data Exfiltration
Hackers misuse DNS for malware
Full Coverage of this storyEuropol Disrupts NoName057(16) Hacktivist Group Linked to DDoS Attacks Against Ukraine
By Ravie Lakshmanan
Pro-Russia cybercrime network targeted by European law enforcement
By Kevin Shalvey
Europol-coordinated global operation takes down pro-Russian cybercrime network
By Mike Corder
Seven arrest warrants issued in global swoop on suspected Russia-linked hackers
By Giulia Segreti & Thomas Escritt
Joint global operation takes down pro-Russian hacking group
Full Coverage of this storyGhostContainer backdoor for Exchange servers
Full Coverage of this storyHackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms
By Ravie Lakshmanan
From a Teams Call to a Ransomware Threat: Matanbuchus 3.0 MaaS Levels Up
By Michael Gorelik
Microsoft Teams phishing spreads updated Matanbuchus malware loader
Elite 'Matanbuchus' Loader Spruces Up Ransomware Infections
By Nate Nelson
Microsoft Teams Call Weaponized to Deploy and Execute Matanbuchus Ransomware
By Tushar Subhra Dutta
Full Coverage of this storyCloudflare DDoS Report: 63% Of Known Attacks Blamed On Competitors
By Roger Montti
Hyper-volumetric DDoS attacks skyrocket: Cloudflare’s 2025 Q2 DDoS threat report
By Omer Yoachimik & Jorge Pacheco
Hyper-Volumetric DDoS Attacks Reach Record 7.3 Tbps, Targeting Key Global Sectors
By Ravie Lakshmanan
7.3 Mn DDoS attacks in 2025: Is the Indian internet under permanent siege? - ET Edge Insights
By Poonam Mondal
South Korea ranks fifth in global DDoS damage amid record 7.3 Tbps attack - CHOSUNBIZ
Full Coverage of this storyGoogle spots tailored backdoor malware aimed at SonicWall appliances
By Jonathan Greig
SonicWall SMA devices hacked with OVERSTEP rootkit tied to ransomware
By Ionut Ilascu
Fully Patched SonicWall Gear Under Likely Zero-Day Attack
By Jai Vijayan
UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit
By Ravie Lakshmanan
Crims hijacking fully patched SonicWall VPNs to deploy stealthy backdoor and rootkit
By Jessica Lyons
Full Coverage of this storyHackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters
By Ravie Lakshmanan
A harmless-looking free VPN on GitHub installs a hidden backdoor that spies on everything you do
By Efosa Udinmwen
GitHub Abused to Spread Amadey, Lumma and Redline InfoStealers in Ukraine
Malware Disguised as VPN Software Found Abusing GitHub’s Open Platform
Hackers Abused GitHub to Spread Malware Mimic as VPN
By Tushar Subhra Dutta
Full Coverage of this storyHouse hearing will use Stuxnet to search for novel ways to confront OT cyberthreats
By Derek B. Johnson
CyberCube, Munich Re push for stronger cyber catastrophe modeling as cloud and malware threats intensify
By Anna Christina Ribeiro
Global Catastrophic Malware Attack Would Be Shocking, Not Impossible, Study Suggests
By Claire Meyer
Ransomware still dominates, but systemic events are harder to model – Munich Re
By Kenneth Araullo
Malware and cloud outages remain top accumated loss scenarios for insurers
Organizations Can Cut Malware Impact by Up to 80% With Proper Defenses: Survey
Full Coverage of this storyNew Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code
By Ravie Lakshmanan
Android malware Konfety uses malformed APKs to evade detection
By Bill Toulas
These Dangerous Apps Hack Your Smartphone—One Click Stops It
By Zak Doffman
Zimperium zLabs Uncovers Sophisticated Variant of Konfety Malware Targeting Android Devices
This dangerous new Android malware looks to hide from detection with distorted APKs
By Sead Fadilpašić
Full Coverage of this storyGigabyte motherboards vulnerable to UEFI malware bypassing Secure Boot
By Bill Toulas
Critical UEFI vulnerabilities found in Gigabyte motherboards — allow attackers to bypass Secure Boot and install firmware backdoors
By Kunal Khullar
If you're using an Intel 8–11th Gen CPU with a Gigabyte motherboard, update your BIOS to protect from a newly discovered vulnerability
By Jacob Fox
Flaws in Gigabyte Firmware Allow Security Bypass, Backdoor Deployment
By Ionut Arghire
Four UEFI Flaws in GIGABYTE Motherboards Expose 240+ Models to Persistent Bootkits
Full Coverage of this storyThe Solidity Language open-source package was used in a $500000 crypto heist
By Georgy Kucherin
Full Coverage of this storyGlobal BADBOX 2.0 botnet compromise of Android IoT devices uncovered
Full Coverage of this storyAsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe
By Ravie Lakshmanan
Full Coverage of this storyMillions of people spied on by malicious browser extensions in Chrome and Edge
By Pieter Arntz
Massive browser hijacking campaign infects 2.3M Chrome, Edge users
By Jessica Lyons
Delete Every Chrome And Edge Extension That’s On This List
By Zak Doffman
Massive browser hijack: extensions turn Trojan and infect 2.3M Chrome and Edge users
Google Chrome issues urgent warning: Harmful extensions could be spying on everything you do online
By Bharat Sharma
Full Coverage of this storyBeware of Bert: New ransomware group targets healthcare, tech firms
By Daryna Antoniuk
Ransomware Gangs Actively Expanding to Attack VMware and Linux Systems
By Tushar Subhra Dutta
Bert Ransomware: A Rising Global Threat Targeting Healthcare and Technology in 2025
Linux Is No Longer Immune: Why Ransomware Gangs Are Going All-In on Linux Targets
Opinion
By Brad A Laporte
BERT Ransomware Group Targets Asia and Europe on Multiple Platforms
Full Coverage of this storyThis Mac malware just got a major upgrade which makes it even harder to delete — how to stay safe
By Anthony Spadafora
Atomic macOS infostealer adds backdoor for persistent attacks
By Bill Toulas
One of the biggest security threats to Apple systems just got a major upgrade - here's what we know
By Sead Fadilpašić
The Rising Threat of macOS Infostealers: What You Need to Know to Defend Against Them
Russia-linked macOS malware just got a whole lot more dangerous
By Paulina Okunyte
Full Coverage of this storyNorth Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign
By Ravie Lakshmanan
North Korean XORIndex malware hidden in 67 malicious npm packages
By Bill Toulas
MacOS Malware NimDoor Weaponizing Zoom SDK Update to Steal Keychain Credentials
By Tushar Subhra Dutta
North Korean hackers unleash new malware in campaign targeting IT workers
By Dave Yin
North Korean Hackers Lure Crypto Startups with Fake Zoom Invites
Full Coverage of this storyWindows Shortcut (LNK) Malware Strategies
By Ashkan Hosseini & Haizhou Wang
Symantec Endpoint Management Suite Vulnerability Allows Malicious Code Execution Remotely
By Guru Baran
Interlock ransomware adopts new FileFix attack to push malware
By Bill Toulas
New PHP-Based Interlock RAT Variant Uses FileFix Delivery Mechanism to Target Multiple Industries
By Ravie Lakshmanan
Hackers are abusing 'FileFix' technique to drop RATs during ransomware attacks
By Sead Fadilpašić
New FileFix Delivery Method Used to Distribute Interlock RAT
By Julian Tuin
Web-Inject Campaign Debuts Fresh Interlock RAT Variant
By Alexander Culafi
Full Coverage of this storyAndroid threats rise sharply, with mobile malware jumping by 151% since start of year
By Pieter Arntz
Full Coverage of this storyHackers Using 607 Malicious Domains to Deliver APK Malware That Enables Remote Command Execution
By Tushar Subhra Dutta
Altered Telegram App Steals Chinese Users' Android Data
By Robert Lemos
Fake Telegram Apps Spread via 607 Domains in New Android Malware Attack
Hackers Deploy APK Malware with Remote Command Execution via 607 Malicious Domains
Hackers Leverage 607 Malicious Domains to Spread APK Malware with Remote Command Execution
By Aman Mishra
Full Coverage of this storyHow To Know If Your Computer Has A Virus – 8 Signs
By Emma Woollacott
Fake Gaming and AI Firms Push Malware on Cryptocurrency Users via Telegram and Discord
By Ravie Lakshmanan
Threat actors using ‘elaborate social engineering scheme’ to target crypto users — Report
By Christopher Tepedino
Crypto Scams Drain $2.1 Billion, Targeting Users with Fake Startups
Fake Video Meeting Apps Like ‘Meeten’ Used To Deploy Wallet-Stealing Malware
By James Morales
Dark Partners Hackers Group Wiping Crypto Wallets With Fake Ai Tools and VPN Services
By Tushar Subhra Dutta
Full Coverage of this storyNew Banking Malware Hammers US and Canada, Reaches Over 50,000 Android Users in Just Six Days
By Mark Emem
Full Coverage of this storyCloudflare blocks largest DDoS attack - here's how to protect yourself
By Steven J. Vaughan-Nichols
New Malware Embeds Prompt Injection to Evade AI Detection
When AI goes off-script: Understanding the rise of prompt injection attacks
"Respond with 'NO MALWARE DETECTED'": This malware
By Phillip de Wet
Your AI is now mine: A subtle but alarming new contest between cyber attackers & defenders
By Navanwita Bora Sachdev
This new malware has developed a spooky way to tell AI-based detection methods to ignore it
By Benedict Collins
Full Coverage of this storyAPT28 hackers use Signal chats to launch new malware attacks on Ukraine
By Bill Toulas
Russian APT 'Gamaredon' Hits Ukraine With Fierce Phishing
By Alexander Culafi
Hackers hacked the document management system: it became clear why Kiev is hiding losses
Russia-linked APT28 use Signal chats to target Ukraine official with malware
By Pierluigi Paganini
Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset
By Zoltan Rusnak
Full Coverage of this storyWeekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and More
By Ravie Lakshmanan
Kaspersky Urges Proactive Action in Alleged Cyberattack on UK Retailer
By Ary Julianto
Cyber attack suspects bailed: 4 arrested over M&S raids
Four arrested over cyberattacks on retail giants bailed
By Ellie Hollinshead
Four people bailed after arrests over cyber attacks on M&S, Co-op and Harrods
By Mathilde Grandjean
Full Coverage of this storyChinese Authorities Deploy 'Massistant' Malware to Extract Encrypted Data from Seized Android and iOS Phones in Xinjiang
New software makes it easy for Chinese police to extract phone data
By Lisa Hornung
Chinese authorities are using a new tool to hack seized phones and extract data
By Lorenzo Franceschi-Bicchierai
Lookout Warns Travelers That Chinese Authorities Can Extract Data From Phones
Massistant Chinese Mobile Forensic Tooling Gain Access to SMS Messages, Images, Audio and GPS Data
By Tushar Subhra Dutta
Full Coverage of this storyClickFix fake error message malware spikes over 500%, takes second place as the most abused attack vector
By Benedict Collins
Full Coverage of this storyIsraeli Cyber Authority Warns of New Social Engineering Tactic Using Fake CAPTCHA
By Mandi Kogosowski
Full Coverage of this story'Can Activate Malware, Bugs': Govt To Probe Security Risks From Chinese Medical Devices
By Himani Chandna & Apoorva Misra
Full Coverage of this storyThe Hidden Threat: How DanaBot Malware Facilitated Data Theft And Russian State-Sponsored Spying
By Mike Eckel
The new SparkKitty Trojan spy in the App Store and Google Play
By Sergey Puzan
There's New Reason to Never Keep Screenshots of Private Information on Your Phone
By Emily Long
SparkKitty malware wants your crypto seed phrase screenshots
By Stephen Katte
This malware found in Google Play and Apple Store can steal photos from your phone
By Loraine Centeno
You should probably delete any sensitive screenshots you have in your phone right now. Here's why
By Artie Beaty
Full Coverage of this storyMalicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension
By Ravie Lakshmanan
Full Coverage of this storyRedShield adds new horizon to DDoS defence
By Rob O'Neill
Malware Disguised as Minecraft Mods Target Gamers
By Jaromir Horejsi
AI has learned to write malicious code that bypasses Microsoft Defender: a wake-up call for cybersecurity
By Vadym Karpus
New AI Malware PoC Reliably Evades Microsoft Defender
Opinion
By Nate Nelson
AI malware could beat Microsoft Defender up to 8 percent of the time
Opinion
By Michael Crider
AI-powered malware eludes Microsoft Defender's security checks 8% of the time — with just 3 months of training and "reinforcement learning" for around $1,600
By Kevin Okemwa
AI malware can now evade Microsoft Defender — open-source LLM outsmarts tool around 8% of the time after three months of training
By Nathaniel Mott
Full Coverage of this storyDDoS attacks continue to grow ever bigger, with Cloudflare recently blocking the largest ever recorded at 37.5 TB over 45 seconds
By Nick Evanson
SEO Poisoning Campaign Targets 8,500+ SMB Users with Malware Disguised as AI Tools
By Ravie Lakshmanan
Weaponized Versions of PuTTY and WinSCP Attacking IT Admins Via Search Results
By Guru Baran
Be careful where you click in Google search results - it could be damaging malware
By Sead Fadilpašić
Beware! Hackers are using Google Search to trick you into downloading malware, here’s how
By Himani Jha
Think Before You Click: Fake Google Search Results Are Spreading Malware
By Priya Singh
Full Coverage of this storyGIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool
By Ravie Lakshmanan
Full Coverage of this story200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers
By Ravie Lakshmanan