The ‘Miasma’ worm source code briefly leaked on GitHub
…Miasma appears to be an evolution of the earlier Shai-Hulud worm, which was previously leaked on GitHub and shares much of the same features, techniques, and even code. The malware infects…
Search
CISA warns of actively exploited RCE flaws in Joomla extensions
…CISA orders feds to prioritize patching Langflow auth bypass flaw Critical Langflow RCE flaw exploited to hack AI app servers CISA warns of max severity Ubiquiti flaws exploited in attacks CISA sets…
Hackers exploit Roundcube flaw to spy on academic researchers
…CISA orders feds to prioritize patching Langflow auth bypass flaw Critical Langflow RCE flaw exploited to hack AI app servers CISA warns of max severity Ubiquiti flaws exploited in attacks Max severity…
Zoom warns of critical account takeover vulnerability
…Zoom Workplace, formerly known as Zoom, is a desktop collaboration application for video meetings, group chat, VoIP phone calls, calendar, email, document collaboration, whiteboards, and AI-powered productivity features. The Windows desktop…
Arch Linux disables AUR package adoption to stop malware flood
…The second stage is a Rust-based infostealer that targets browser credentials, cryptocurrency wallets, password manager data, cloud and developer secrets, AI service API keys, SSH keys, and messaging platform tokens. It…
RedHook Android malware now uses Wireless ADB for shell access
…app updates on GitHub BTMOB Android malware service generates custom phishing payloads Android 17 to expand banking scam call and privacy protections 'Ghostcommit' hides prompt injection in images to fool AI agents…
Windows 11 KB5095093 update rolls out new Point-in-Time restore feature
…This update introduces numerous new features, including a standout Point-in-Time Restore feature that allows Windows users to easily roll back their operating system, applications, and files to a previous point…
Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials
…Software developers working on such platforms integrate Paysafe’s SDKs into apps and websites to implement a secure payments and funds management system. According to application security company Socket, these developers are…
Kali Linux 2026.2 released with 9 new tools, NetHunter updates
…Magisk standalone kernel flashing support, new kernels with qcacld3 injection support, kernels for more versions and phones, and bare metal support on more phones via NetHunter Pro. "The Kali NetHunter app launches…
Malicious sites use JavaScript to build malware in browser memory
…crypto-stealing malware via Windows shortcut files Fake Claude app promoted by Bing ads pushes SectopRAT malware New Dolphin X malware uses AI to rank high-value targets New msaRAT malware uses…