Threat actors favored stealthy persistence and evasion over other techniques, in order to silently exfiltrate data for extortion, according to Picus Security. The security vendor analyzed over 1.1 million malicious files and more than 15.5 million actions in 2025 to… Read More "“Digital Parasite” Warning as Attackers Favor Stealth for Extortion"
Ravie LakshmananApr 05, 2026Malware / DevSecOps Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy reverse shells, harvest credentials,… Read More "36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants"
A new mobile spyware operation known as ZeroDayRAT has been documented targeting both Android and iOS devices. The cross-platform tool provides attackers with persistent access to personal communications, precise location data and banking activity. According to a new advisory published… Read More "New Mobile Spyware ZeroDayRAT Targets Android and iOS"
A high-volume phishing campaign delivering the long-running Phorpiex malware has been observed using emails with the subject line “Your Document,” a lure widely seen throughout 2024 and 2025. The messages include an attachment that appears to be a harmless document… Read More "Phorpiex Phishing Delivers Low-Noise Global Group Ransomware"
System administrators are likely to have a busy February after Microsoft released updates to fix six actively exploited zero-day vulnerabilities, three of which have been publicly disclosed. The zero-days are as follows: CVE-2026-21510 is a security feature bypass vulnerability in… Read More "Microsoft Fixes Six Zero Day Vulnerability in February Patch Tuesday"
Vulnerability disclosures are on track to hit, or even surpass, a record-breaking 50,000 in 2026 according to the Forum of Incident Response and Security Teams (FIRST). In its 2026 Vulnerability Forecast, published on February 11, the non-profit predicted a median… Read More "FIRST Forecasts Record-Breaking 50,000+ CVEs in 2026"
A Chinese national has been sentenced to two decades behind bars for his part in a global crypto-investment fraud scheme which cost victims over $73m. Daren Li, 42, who is a dual national of China and tiny Caribbean state St.… Read More "US Court Hands Crypto Scammer 20 Years in $73m Case"
A North Korean hacking campaign is targeting financial technology and cryptocurrency firms with attacks which combine social engineering, deepfakes and MacOS malware. The attacks have been detailed by Google Cloud’s Mandiant Threat Intelligence, which has attributed the campaign to UNC1069,… Read More "North Korean Hackers Use Deepfake Video Calls to Target Crypto Firms"
The time between vulnerability disclosure and exploitation has plunged 94% over the past five years as threat actors weaponize so-called “n-days,” according to a new Flashpoint study. The threat intelligence vendor claimed that “time to exploit” (TTE) dropped from 745 days… Read More "Time to Exploit Plummets as N-Day Flaws Dominate"
The so-called “AI skills” used to scale and execute AI operations are dangerously exposed to data theft, sabotage and disruption, TrendAI has warned. The newly named business unit of Trend Micro explained in a report published this week that AI… Read More "AI Skills Represent Dangerous New Attack Surface, Says TrendAI"
