Trending Topics
Critical Severity
1 CVE
CVE-2026-1731
BeyondTrust Remote Support & PRA
ClickFix
Coverage of the ClickFix social engineering technique, in which fake CAPTCHA or verification pages trick victims into copying and pasting attacker-supplied commands into a terminal or Run dialog, bypassing traditional file-based delivery and detection.
Trending Topics
LummaStealer resurges via CastleLoader and ClickFix lures. State and criminal groups use AI to speed up attacks. Attackers abuse Net Monitor and SimpleHelp RMM tools for ransomware access. Scattered Spider (Muddled Libra, UNC3944) creates a rogue VM to exfiltrate Snowflake data.
Surge in Fake Installers and Malvertisement Campaigns
Fake installer and malvertising campaigns now span Windows and macOS alike, using trojanized DMG and EXE files, delayed activation, and hardware-gated payloads to harvest browser, keychain, and developer credentials while still installing the expected app.
Malicious Browser Extensions on the Rise
Malicious browser extensions are hijacking trusted store listings and developer accounts to push weaponized updates, with "sleeper" extensions lying dormant for years before activating spyware, session theft, or full RAT deployment across millions of installs.
Trending Topics
TRENDING TOPICS
JAN 29, 2026
Update: TA584 Accelerates Initial Access Innovation with
Trending Topics
Lazarus Group's "Fake Font" campaign abuses VS Code tasks to deploy InvisibleFerret via fake coding interviews. Stanley MaaS guarantees Chrome Web Store approval for phishing extensions. Amatera Stealer spreads via fake CAPTCHA and App-V LOLBIN abuse.
ConsentFix: MFA-Bypassing OAuth Phishing
ConsentFix lets attackers hijack Microsoft's own OAuth sign-in flow to steal authorization codes and bypass MFA entirely. Researchers link the technique with moderate-to-high confidence to Russia's APT29.
Trending Topics
CVE-2026-20822
Critical
Windows Graphics Component
PRIVILEGE ESCALATION
Windows Graphics Component
Trending Topics
CVE-2026-0625
Critical
D-Link DSL/DIR/DNS Devices
AUTHENTICATION BYPASS
Trending Topics
ErrTraffic industrializes ClickFix social engineering with a polished SaaS-like platform. Magecart expands from payment skimming to full identity compromise. APT36 (Transparent Tribe) deploys fileless LNK malware against Indian government targets.
Trending Topics
TRENDING TOPICS
DEC 17, 2025
GhostPoster: Steganography-Enabled Malicious Firefox Extension
Intelligence
Trending Topics
CVE-2025-62221
High
Windows Cloud Files Mini Filter
PRIVILEGE ESCALATION
EXPLOITED