LummaStealer
TRENDING TOPICS FEB 12, 2026 Update: LummaStealer Rebuilds at Scale Using CastleLoader and Social-Engineering-Driven Delivery Chains Security researchers have observed a renewed surge in LummaStealer activity, demonstrating how the infostealer operation has rapidly recovered despite a major law-enforcement disruption in 2025 that dismantled thousands of command-and-control domains. LummaStealer, a malw
Reprompt
CVE-2026-20822 Critical Windows Graphics Component PRIVILEGE ESCALATION Windows Graphics Component Elevation of Privilege Vulnerability enabling local attackers to gain SYSTEM-level privileges. CVE-2026-20854 Critical Windows LSASS REMOTE CODE EXECUTION Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability allowing network-based exploitation. CVE-2026-20876 Critical Windows VBS Enclave PRIVILEGE ESCALATION Windows
Odyssey Stealer
TRENDING TOPICS AUGUST 11, 2025 Odyssey Stealer Targets macOS in Sophisticated ClickFix Campaign In August 2025, researchers at X-Labs uncovered Odyssey Stealer. This macOS-targeting malware builds upon earlier ClickFix phishing techniques to harvest cryptocurrency wallet data, browser credentials, and sensitive personal files. The campaign leverages domains that display fake CAPTCHA
Koske
CVE-2025-25257 Critical FortiClientEMS SQL injection vulnerability in FortiClientEMS versions 7.2.0–7.2.2 and 7.0.1–7.0.10, allowing unauthenticated attackers to perform SQL injection via crafted HTTP requests. Exploitation could lead to unauthorized access, data manipulation, or full system compromise in centralized endpoint management deployments.