CastleRAT
TRENDING TOPICS MAR 12, 2026 CastleRAT Campaign Abuses Deno Runtime and Steganography to Deliver Fileless Malware Researchers at ThreatDown identified a malware campaign that delivers CastleRAT, a remote access trojan designed for espionage, surveillance, and credential theft, by abusing the legitimate Deno JavaScript runtime. The attack begins with a social
UNC6426
TRENDING TOPICS MAR 11, 2026 UNC6426: From Stolen GitHub Token to Full Cloud Takeover in 72 Hours A threat actor tracked as UNC6426 exploited stolen keys from the 2025 Nx npm package supply chain compromise to fully breach a victim’s AWS cloud environment in just three days, according to
Starkiller
TRENDING TOPICS FEB 23, 2026 Starkiller PHaaS Raises the Risk of MFA Bypass Phishing Starkiller is a phishing framework that increases the credibility and scale of credential theft by showing victims the real login page during the attack, rather than a copy that can become outdated. It does this by
Reprompt
CVE-2026-20822 Critical Windows Graphics Component PRIVILEGE ESCALATION Windows Graphics Component Elevation of Privilege Vulnerability enabling local attackers to gain SYSTEM-level privileges. CVE-2026-20854 Critical Windows LSASS REMOTE CODE EXECUTION Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability allowing network-based exploitation. CVE-2026-20876 Critical Windows VBS Enclave PRIVILEGE ESCALATION Windows
MacSync
TRENDING TOPICS DEC 23, 2025 MacSync Stealer Escalates macOS Risk Through Trusted App Abuse Jamf Threat Labs has identified a significant evolution in the MacSync Stealer malware that materially increases risk for macOS users by abusing Apple’s built-in trust mechanisms. In this campaign, the malware is delivered as a
APT44
TRENDING TOPICS DEC 16, 2025 Russian State-Backed Campaign Exploits Network Edge Weaknesses to Target Critical Infrastructure Amazon’s threat intelligence team has revealed a long-running Russian state-sponsored cyber campaign that targeted Western critical infrastructure from 2021 through 2025, with a strong focus on the energy sector. The activity is attributed
AI
TRENDING TOPICS NOV 06, 2025 Escalating Threat Trends in AI-Driven Malware Engineering and State-Aligned Abuse of LLM Capabilities Google’s threat intelligence team uncovered PROMPTFLUX, an emerging VBScript-based malware family that taps Gemini’s API to regenerate its own code on demand. The script feeds the model machine-parsable prompts to
Google Gemini
TRENDING TOPICS OCT 08, 2025 Gemini Exposed to ASCII Smuggling Exploit Enabling Hidden Prompt Injection FireTail researchers have discovered that Google’s Gemini AI remains vulnerable to ASCII Smuggling, an exploit that utilizes invisible Unicode control characters to conceal malicious commands within ordinary text. FireTail demonstrated that Gemini fails to
Iran
TRENDING TOPICS JUNE 24, 2025 DHS Warns of Pro-Iranian Hacktivist Surge Following U.S.-Iran Military Escalation In the aftermath of the United States’ June 22, 2025, airstrikes on Iranian nuclear facilities and Tehran’s swift retaliatory missile attacks on U.S. bases in Qatar and Iraq, the Department of
Waitung Threat Hyjacking
TRENDING TOPICS APR 15, 2025 New Stealth Malware Technique “Waiting Thread Hijacking” Bypasses Detection with Minimal Footprint Researchers at Check Point have detailed a novel malware injection method known as Waiting Thread Hijacking (WTH), which allows malicious code to be executed inside legitimate Windows processes without relying on traditionally flagged