Information Security News

Category: Malware

CVE-2026-0257 Qilin ransomware attack chain from PAN-OS GlobalProtect authentication bypass to domain-wide Windows encryption 0

Malware

CVE-2026-0257 Qilin Ransomware Hits GlobalProtect

A single vulnerable VPN gateway can lay open an entire corporate network. Affiliates of the Qilin extortion group are already turning a fresh PAN-OS GlobalProtect flaw to precisely that purpose. Arctic Wolf specialists have...

HollowGraph Microsoft 365 malware exploiting calendar events for C2 communications 0

Malware

HollowGraph Malware Exploits Microsoft 365 Calendars

Unveiling the HollowGraph Threat A cloud calendar can conceal far more than mundane appointments; the HollowGraph malware exploits Microsoft 365 to clandestinely receive commands and transmit pilfered files. Cybersecurity experts at Group-IB have detected...

ServiceNow RCE vulnerability exploitation diagram, CVE-2026-6875 sandbox bypass attack, ServiceNow critical security flaw 0

Malware

ServiceNow RCE Vulnerability Exploited in the Wild

Critical Pre-Authentication Breach Hackers have begun breaching corporate systems via a critical ServiceNow RCE vulnerability. This severe flaw allows them to infiltrate servers without an account and execute arbitrary code. Cybersecurity specialists at Defused...

Android 16 Gemini bypass vulnerability demonstrated on a locked smartphone screen 0

Malware

Android 16 Gemini Bypass: Lock Screen Security Flaw

Smart AI features blend into modern smartphones today. As a result, these convenient tools introduce new security risks. Recently, researchers discovered a critical bug within the mobile software. Specifically, an Android 16 Gemini bypass...

ClickLock macOS malware blocking system access and stealing passwords 0

Malware

ClickLock Malware: A Deceptive Trap for macOS Users

A mundane password prompt can swiftly transform your macOS desktop into a perilous snare. Specifically, a novel malicious program named ClickLock completely paralyzes the operating system. It persistently halts all functionality until the owner...

VeriChat AI platform performing hardware backdoor detection on microchip designs 0

Malware

Exposing Hardware Backdoors with VeriChat AI

The Hidden Threat in Silicon A hidden circuit inside a processor can remain dormant for years. Consequently, chip designers face severe security risks from untrusted third-party vendors. Indeed, malicious suppliers can easily hide hardware...

Diagram illustrating the jscrambler supply chain attack and IronWorm malware infection process 0

Malware

Jscrambler Supply Chain Attack Analysis

The Initial Compromise and Detection A stolen package registry key enabled a cybercriminal to execute a severe jscrambler supply chain attack. They successfully uploaded five infected versions of the npm package. These rogue versions...

Critical Joomla extension vulnerabilities diagram, iCagenda and Balbooa Forms exploit overview 0

Malware

Critical Joomla Extension Vulnerabilities Actively Exploited

Immediate Threat to Joomla Websites Two critical vulnerabilities in Joomla’s iCagenda and Balbooa Forms extensions face active exploitation. Furthermore, cybercriminals launched these attacks before developers could issue patches. Both flaws permit attackers to upload...