Dohdoor Backdoor Campaign
CVE-2026-20127 Critical Severity Vulnerability Description A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering
AI
TRENDING TOPICS FEB 19, 2026 AI as Infrastructure: Covert C2 Relays and the Emergence of Prompt-Driven Malware Security researchers at Check Point Research demonstrated that modern AI assistants with web-fetch or browsing capabilities can be repurposed as covert command-and-control relays, effectively turning trusted AI platforms into proxy infrastructure. By abusing
TA584
TRENDING TOPICS JAN 29, 2026 Update: TA584 Accelerates Initial Access Innovation with ClickFix and Tsundere Bot MaaS TA584 is a highly active and adaptive initial access broker that significantly increased its operational tempo throughout 2025, tripling monthly campaign volume while continuously rotating infrastructure, lures, and delivery techniques. The actor demonstrated
Evely Stealer
TRENDING TOPICS JAN 20, 2026 Evelyn Stealer: Developer-Focused Supply Chain Malware Leveraging Weaponized VS Code Extensions Evelyn Stealer is a multi-stage information-stealing malware campaign targeting software developers through the abuse of the Visual Studio Code extension ecosystem. First publicly documented in late 2025 and expanded upon in January 2026, the
Mycelial Mage
TRENDING TOPICS DEC 29, 2025 Tracing the Mycelial Mage Credential Theft Operation and Its Evolving Exfiltration Infrastructure Researchers found a credential theft operation, tracked here as Mycelial Mage, through sustained observation of phishing kit deployments beginning in early 2025. The activity centers on phishing pages designed to impersonate Microsoft Outlook