C0XMO botnet spreads via DD-WRT router flaw, kills rival malware
C0XMO botnet spreads via DD-WRT router flaw, kills rival malware By Bill Toulas June 7, 2026 10:17 AM A new variant of the Gafgyt botnet called C0XMO is targeting DD…
Search
Top stories
Instructure reaches 'agreement' with ShinyHunters to stop data leak
…The company says over 30 million educators and students use its Canvas platform across more than 8,000 schools and universities worldwide. In a Tuesday statement, Instructure said the cybercrime gang also…
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges
…and GitLab, prompting the creation of a self-hosted code platform at projectnightcrawler.dev. BleepingComputer has contacted Microsoft about the new zero-day and will update the story if we receive a…
Over 400 Arch Linux packages compromised to push rootkit, infostealer
…A report from the open-source intelligence community Independent Federated Intelligence Network (IFIN) notes that a new maintainer is spoofing a trusted publisher on the AUR platform to push infected packages. The…
Instagram users locked out after Meta AI abused to steal accounts
…In many cases, impacted users are unable to recover access due to the platform's use of automated assistance that involves only AI/chatbot loops and no human support agents. On Monday…
Android 17 to expand banking scam call and privacy protections
…Chrome for Android will scan downloaded APKs for known malware before installation. “Mark as lost” will require biometrics to unlock devices, hide Quick Settings, and block new Wi-Fi and Bluetooth connections…
Gogs patches critical zero-day enabling remote code execution
…This blocks the easiest attack path (creating a new repo with rebase enabled), but does not prevent exploitation by users with write access to existing repositories. Audit rebase merge settings: While "Rebase…
GreyVibe hackers use ChatGPT, Gemini to power cyberattacks
…Furthermore, the threat actor uploaded development and test samples to a public scanning platform, which is not typical with nation-state actors. Additionally, a cryptocurrency miner was deployed on some victim machines…
Laravel Lang packages hijacked to deploy credential-stealing malware
…The downloaded PHP payload [ VirusTotal ] was a large cross-platform credential stealer for Linux, macOS, and Windows that harvests cloud credentials, Kubernetes secrets, Vault tokens, Git credentials, CI/CD secrets, SSH keys…
To show you the most relevant results, we’ve omitted some entries very similar to those already shown. Repeat the search with the omitted results included.