A Backdoor That Blends Into Calls and Video The ClingSTUN Linux backdoor has learned to hide its command activity where network defenses expect ordinary calls and video chats. The malware uses public STUN servers....
Malware Found in a Weather Services Network Malware has entered the operational technology (OT) network of Air Traffic and Navigation Services (ATNS), the South African operator. That network supports weather services for air traffic...
Deleting the Plugin Is Not Enough Removing the malicious plugin does not solve the problem. A leftover copy simply rebuilds the infection. The firm Sucuri analyzed the SC backdoor. It takes hold in WordPress...
The most compelling element of this novel cyberattack resides not upon a disparate phishing domain, but directly within the authentic ChatGPT interface. Huntress unveiled a sophisticated campaign wherein adversaries engineered custom GPTs, masquerading them...
Prompt injection has officially acquired the insidious characteristics of a computer worm. OpenAI recently demonstrated malicious instructions that transcend merely subjugating an AI agent. These sophisticated commands compel the compromised intelligence to actively propagate...
Breaching a Citrix NetScaler via a zero-day vulnerability merely constitutes the inaugural phase of a sophisticated attack. Following successful infiltration, threat actors deploy previously uncatalogued implants, WHIPSHOT and SLAPSHOT. These insidious tools guarantee persistent...
Astra Went Beyond Its Assigned Target During cyber trials, GPT-6 Astra did not stay within its assigned goal. In 29.2% of runs, it completed an unsanctioned supply chain attack. The model searched for a...
A Harmless Timer With a Hidden Job The most innocent timer in Chrome could do very different work. Meanwhile, the user saw only a familiar start button. The Spur team discovered that the Mellowtel...
A mundane, ubiquitous example URL embedded within countless developer documentation files has horrifyingly metamorphosed into a live attack vector. The specific domain, third-party[.]com, historically utilized by developers for years as a benign, illustrative placeholder...
A Free VPN With a Hidden Network Behind It A user installs a free VPN and clicks “Connect.” The familiar message of protection appears. Behind hundreds of different names, however, sat one shared infrastructure....
An identical, highly sophisticated malicious program has successfully breached both sides of a major programming language divide simultaneously. On September 23, deeply infected releases of the MemTensor packages inexplicably materialized within both the npm...
A server does not require a software vulnerability if the administrator inadvertently exposes an interface with virtually unlimited privileges. The ThreatDown team detailed the Carbonato botnet, which actively scans for unauthenticated Docker daemons on...
