Lazarus Group
TRENDING TOPICS FEB 24, 2026 Update: Lazarus Expands Ransomware Playbook, Leveraging Medusa Against U.S. Healthcare North Korea’s Lazarus Group has expanded its financially motivated operations by leveraging the Medusa ransomware. Security researchers at Symantec assess that a Lazarus Group subgroup, commonly tracked as Andariel or Stonefly and linked
RondoDoX
CVE-2025-54322 Critical Xspeeder SXZOS ≤2025-12-26 REMOTE CODE EXECUTION ROOT ACCESS Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also exploited, enabling complete system compromise with root-level privileges. Mitigation: Immediately update Xspeeder SXZOS
Atomic macOS
TRENDING TOPICS DEC 15, 2025 Update: AI-Poisoned Search and Trust-Based Delivery of Atomic macOS Stealer Atomic macOS Stealer activity demonstrates a notable shift in initial access tradecraft, moving away from phishing emails, trojanized installers, and overt social engineering toward abuse of trusted search and AI platforms. In this campaign, victims
npm Packages
TRENDING TOPICS SEPT 09, 2025 Largest NPM Supply-Chain Attack Targets Crypto Transactions Hackers have hijacked 18 widely used npm packages, with a combined weekly download volume exceeding two billion, and injected them with obfuscated malware that directly targets cryptocurrency users and developers. The breach was traced to a phishing campaign
macOS
TRENDING TOPICS SEPT 08, 2025 Hackers Exploit Fake Microsoft Teams Site to Spread Odyssey macOS Stealer Security researchers have uncovered a large-scale campaign abusing a fraudulent Microsoft Teams download site to distribute the newly identified Odyssey stealer, a macOS malware family with extensive data theft capabilities. Hosted on the domain
Odyssey Stealer
TRENDING TOPICS AUGUST 11, 2025 Odyssey Stealer Targets macOS in Sophisticated ClickFix Campaign In August 2025, researchers at X-Labs uncovered Odyssey Stealer. This macOS-targeting malware builds upon earlier ClickFix phishing techniques to harvest cryptocurrency wallet data, browser credentials, and sensitive personal files. The campaign leverages domains that display fake CAPTCHA
ARC Platform
TRENDING TOPICS JULY 28, 2025 ARC Intelligence Portal Breach Compromises CIA-Linked Contractor Data The Acquisition Research Center (ARC), a key contracting portal used by the CIA and other U.S. intelligence agencies, was recently breached by unidentified hackers, resulting in the exposure of sensitive data tied to multiple high-level intelligence
Atomic macOS
TRENDING TOPICS JULY 08, 2025 Update: Atomic macOS Stealer Expands Capabilities With Persistent Backdoor, Escalating Threat to macOS Ecosystems Earlier this year, we reported on Russian-speaking threat actors using platforms like GitHub and FileZilla to distribute the Atomic macOS Stealer (AMOS), targeting macOS users through fake versions of legitimate software.