Cybersecurity researchers persist in their investigation of a sophisticated incursion targeting the ubiquitous text editor Notepad++, which remained undetected for nearly half a year—from June through December 2025. By compromising the hosting provider for...
A sophisticated supply chain incursion has been documented within the Open VSX extension registry, precipitated by the illicit seizure of a developer’s credentials. Adversaries surreptitiously integrated malicious payloads into widely utilized development tools to...
Analysts at Intrinsec have documented a surge in offensives leveraging the PhantomVAI loader, a utility architected upon the legacy RunPE framework and deployed in global cyber incursions. This instrument has surfaced concurrently across several...
A pronounced escalation in the activity of infrastructure tethered to the AsyncRAT remote access trojan has been meticulously documented across the global network. Analysis of pervasive telemetry reveals that the command-and-control (C2) servers of...
For nearly half a year, the ubiquitous text editor Notepad++ inadvertently disseminated malicious payloads rather than legitimate refinements. This incursion remained veiled from June through December 2025, subverting the update mechanism of a utility...
The burgeoning AI assistant ClawdBot has precipitously descended into the vortex of a sophisticated malware offensive. Cybersecurity analysts have unearthed hundreds of deceptive plug-ins masquerading as indispensable cryptocurrency trading utilities; in reality, these modules...
A stealthy security breach has compromised one of the most prominent open-source content management projects. An anonymous adversary surreptitiously injected malicious code into several GitHub repositories by forcibly overwriting the commit history—a maneuver where...
The burgeoning popularity of the AI assistant Moltbot—formerly known as Clawdbot, a nomenclature abandoned following trademark disputes with Anthropic—has provoked profound trepidation among cybersecurity luminaries. Marketed as a personal aide with sophisticated agentic capabilities,...
The cybercriminals orchestrating the Kimwolf botnet appear intent on flaunting a truly monumental acquisition. A screenshot has surfaced online purportedly demonstrating their infiltration of the control panel for Badbox 2.0, one of the world’s...
The North Korean-aligned cyber-espionage syndicate Andariel has reasserted its presence through a sophisticated offensive targeting entities across Europe and South Korea. A comprehensive analysis by WithSecure elucidates that the collective is not merely intensifying...
In late December 2025, the architects of the renowned text editor EmEditor issued a formal advisory regarding the compromise of the application’s official distribution portal. Malefactors surreptitiously substituted the authentic installer with a deleterious...
Experts from Trend Micro have identified the pervasive deployment of PeckBirdy, a malevolent JavaScript framework orchestrated by collectives associated with Chinese state apparatuses. This instrument has been operational since at least 2023, utilized in...
