Search: executive messaging

SHub macOS infostealer variant spoofs Apple security updates

…When the victim clicks ‘Run,’ the script displays a fake Apple security update message referencing XProtectRemediator, downloads a shell script using ‘curl,’ and executes it silently via ‘zsh.’ Before deploying its data…

May 18, 2026 · Bill Toulas

Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days

…of Privilege Vulnerability Important Windows Message Queuing CVE-2026-34329 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Important Windows Message Queuing CVE-2026-33838 Windows Message Queuing (MSMQ) Elevation of Privilege…

May 12, 2026 · Lawrence Abrams

Palo Alto Networks firewall zero-day exploited for nearly a month

… Cybersecurity and Infrastructure Security Agency CISA also added the CVE-2026-0300 zero-day to its Known Exploited Vulnerabilities KEV Catalog and ordered Federal Civilian Executive Branch FCEB agencies to secure vulnerable firewalls by Saturday midnight, May 9. …

May 7, 2026 · Sergiu Gatlan

ChatGPT share links abused to host fake outage pages to deliver malware

…BleepingComputer's test of the Windows version on Any.Run found that it executes various commands to determine whether the device is a legitimate computer or a virtual machine. Push Security also…

May 29, 2026 · Lawrence Abrams

Hackers Are After the Gaps in Your Vulnerability Program: Here's Their Playbook

…The underlying message is simple: the technical gap is smaller than beginners think. That message explains much of the forum response. One user said they had finished many hacking courses but still…

Jun 4, 2026

Russian hackers turn Kazuar backdoor into modular P2P botnet

… Internal communications rely on IPC inter-process communication , including Windows Messaging, Mailslots, and named pipes, blending well with normal operational noise. …

May 16, 2026 · Bill Toulas

New PCPJack worm steals credentials, cleans TeamPCP infections

…Upon execution, it creates a hidden working directory, installs Python dependencies, downloads additional modules, establishes persistence, and launches the main orchestrator (monitor.py). During this initial stage, PCPJack explicitly checks for TeamPCP…

May 7, 2026 · Bill Toulas

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

… The malware targets developer secrets, including: GitHub Actions OIDC tokens and PATs Git credentials npm publish tokens AWS Secrets Manager, IAM, and ESC task credentials Kubernetes service account tokens and cluster credentials HashiCorp Vault tokens SSH keys Claude Code configs VS Code tasks .en… …

May 12, 2026 · Bill Toulas

New TCLBanker malware self-spreads over WhatsApp and Outlook

…Live screen streaming Screenshot capturing Keylogging Clipboard hijacking Shell command execution Window management File system access Process enumeration Remote mouse/keyboard control During active sessions, the Task Manager process is killed to…