Security researchers have documented a nascent surge in offensives orchestrated by the GoBruteforcer botnet, specifically targeting the infrastructure of cryptocurrency and blockchain enterprises. The primary casualties of this campaign are internet-exposed databases and administrative...
A detailed technical analysis of the malware known as VVS Stealer, also referred to as VVS $tealer, has surfaced online. This data-stealing tool is written in Python and primarily targets Discord users. It siphons...
Popular IDEs with AI assistants—such as Cursor, Windsurf, Google Antigravity, and Trae—have been found vulnerable to a supply-chain attack. These environments prompt users to install extensions that are absent from the OpenVSX catalog. The...
More than two million infected devices worldwide—this is the scale of the new botnet known as Kimwolf, according to an assessment published by Synthient. The countries reporting the highest number of infections include Vietnam,...
A hacking group operating under the name DarkSpectre has, for seven years, systematically infected the computers of users running Chrome, Edge, and Firefox browsers. According to Koi Security, more than 8.8 million unique devices...
The hacking group known as Transparent Tribe has launched a new wave of cyber-espionage operations targeting government bodies, research institutions, and strategically important organizations in India. The attackers’ primary weapon is yet another variant...
A new wave of malicious extensions has been uncovered in the Open VSX extension marketplace, which is used by millions of developers worldwide. Researchers at Koi Security warn that attackers are seeding the catalog...
A serious incident caused by ransomware has struck Romania’s largest coal-fired power producer, Oltenia Energy Complex. The attack, detected during the night of December 26, disrupted digital systems and temporarily rendered several internal services...
Cyber-espionage attributed to the Chinese group HoneyMyte—also known as Mustang Panda and Bronze President—has reached a new level. Researchers have observed the deployment of an advanced version of the ToneShell malware, concealed by a...
The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks. At the center of this trend are XLL files, specialized Excel add-ins that are, in reality,...
In late December, an unwelcome supply-chain surprise erupted around the popular text editor EmEditor. According to the developer, between December 19 and 22, 2025, the download button on the official website may have served...
A new commodity has surfaced on underground forums for those seeking to operate more quietly—and for longer. An actor using the alias AlphaGhoul has begun promoting a utility called NtKiller, which, according to its...
