malwarevia WeLiveSecurity (ESET)
GopherWhisper: A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions
Apr 23, 2026 UTC
Security news
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
malwarevia WeLiveSecurity (ESET)
New NGate variant hides in a trojanized NFC payment app
ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI
Apr 21, 2026 UTC
malwarevia WeLiveSecurity (ESET)
GuardBreaker: Derailing AI-assisted malware analysis with a code comment
LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor
Sep 10, 2026 UTC
vulnerabilityvia SecurityWeek
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation...
Oct 28, 2026 UTC
threat-intelvia The Hacker News
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the...
Oct 27, 2026 UTC
malwarevia The Hacker News
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directo...
Oct 27, 2026 UTC
vulnerabilityvia CIS Advisories
A Vulnerability in Fortinet FortiMail Could Allow for Arbitrary Code Execution
A vulnerability has been discovered in Fortinet FortiMail that could allow for arbitrary code execution. Fortinet FortiMail is a secure email gateway that protects organizations fr...
Oct 2, 2026 UTC
vulnerabilityvia CIS Advisories
Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution
Multiple vulnerabilities have been discovered in Cisco Secure Email products, the most severe of which could allow for remote code execution. Cisco Secure Email Gateway (formerly...
Sep 15, 2026 UTC
vulnerabilityvia CIS Advisories
A Vulnerability in Zoom Clients Could Allow for Remote Code Execution
A vulnerability has been discovered in Zoom Clients that could allow for remote code execution. Zoom is a cloud-based communications platform that allows users to connect via video...
Aug 12, 2026 UTC
vulnerabilityvia CSO Online
10 ways attackers abuse AI services to hack your business
Attackers are starting to exploit AI systems to mount attacks in the same way they once relied on built-in enterprise tools such as PowerShell. Instead of relying on malware, cybe...
Oct 28, 2026 UTC
supply-chainvia CSO Online
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload blobs large enough “to evade...
Oct 28, 2026 UTC
vulnerabilityvia CSO Online
Attackers built a ‘Skynet’ AI agent that hijacks exposed models to run cyberattacks
Skynet is no longer a fictional adversary. Attackers have built an offensive agent that exploits unprotected AI models on the web with a ‘Skynet’ directive that allows them to run...
Oct 28, 2026 UTC