ACRStealer
TRENDING TOPICS JULY 24, 2025 Update: ACRStealer Evolves into AmateraStealer with Advanced Evasion and C2 Techniques ACRStealer, an information-stealing malware that has been active since 2024, underwent significant enhancements in 2025, including upgrades to its stealth and command-and-control (C2) capabilities. Noted initially for abusing services like Google Docs and Steam
Windows UI Automation
TRENDING TOPICS JULY 23, 2025 Update: Coyote Banking Trojan Becomes First to Exploit Windows UI Automation for Credential Theft A newly identified variant of the Coyote banking trojan is the first known malware to exploit Microsoft’s UI Automation (UIA) framework for real-world credential theft, marking a major shift in
Salt Typhoon
CVE-2025-49596 Critical MCP Inspector A remote code execution vulnerability in MCP Inspector due to improper validation of serialized input during inspection routines. This vulnerability can be exploited over the network without authentication. Impact: Users should immediately upgrade to MCP Inspector version 3.9.2 or later to remediate this critical
Hacktivists
TRENDING TOPICS JULY 15, 2025 Update: Hacktivist Attacks on Industrial Systems Intensify Amid Global Tensions Hacktivist operations targeting Industrial Control Systems (ICS) have grown significantly in both scale and sophistication, shifting from basic denial-of-service efforts to more coordinated, technically advanced intrusions aimed at disrupting operations and stealing sensitive data. According
GitHub
TRENDING TOPICS JUNE 13, 2025 GitHub Device Code Flow is the New Backdoor for Phishing Attacks A new phishing technique quietly targets developers by misusing GitHub’s OAuth 2.0 Device Code Flow, a login method originally intended for smart devices and limited-input systems. Attackers start by requesting a real
TRENDING TOPICS JUNE 10, 2025 Google Fixes Flaw Allowing Phone Number Brute-Forcing for Account Recovery A serious flaw in Google's account recovery process was uncovered, allowing attackers to brute-force the recovery phone number associated with a Google account. This flaw was identified in an older, deprecated version of
Golang
TRENDING TOPICS MAY 06, 2025 Golang Supply Chain Attack Targets Linux Servers with Disk-Wiping Malware A recent supply-chain attack has been uncovered targeting Linux servers through malicious Golang modules published on GitHub. Security researchers identified three modules—prototransform, go-mcp, and tlsproxy—that contained highly obfuscated code designed to pull and
ResolverRAT
TRENDING TOPICS APR 29, 2025 Update: ResolverRAT; Advanced Memory-Resident Malware Targets Healthcare and Pharma ResolverRAT is a newly identified remote access trojan that has emerged as a distinct and sophisticated threat, first spotted in March 2025. It’s specifically targeting healthcare and pharmaceutical organizations, using regionally tailored phishing campaigns to
AkiraBot
TRENDING TOPICS APR 10, 2025 AkiraBot: AI-Driven Spam Campaign Targeting SMB Web Platforms AkiraBot is an advanced spam automation tool that exploits online contact forms, chat widgets, and comment sections across small to medium-sized business websites. Since September 2024, it has targeted over 420,000 unique domains and successfully spammed