Ravie LakshmananApr 13, 2026Threat Intelligence / Malware Banks and financial institutions in Latin American countries like Brazil and Mexico have continued to be the target of a malware family called JanelaRAT. A modified version of BX RAT, JanelaRAT is known… Read More "JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025"
A newly issued emergency directive from the US Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting vulnerabilities in Cisco Catalyst SD-WAN infrastructure used across US federal networks. The directive, known as Emergency Directive 26-03, orders… Read More "CISA Issues Emergency Directive Over Exploited Cisco SD-WAN Flaws"
Sarika Sharma Sarika, a cybersecurity enthusiast, contributes insightful articles to Fidelis Security, guiding readers through the complexities of digital security with clarity and passion. Beyond her writing, she actively engages in the cybersecurity community, staying informed about emerging trends and… Read More "Mitigating Insider Threats with Deception: A Strategy for 2025"
A newly identified Android banking trojan, known as Mirax, is spreading across Europe and combines remote access features with residential proxy capabilities to broaden its impact. According to an advisory published by Cleafy, the malware has been observed targeting Spanish-speaking users,… Read More "Mirax Android Trojan Turns Devices Into Residential Proxy Nodes"
The CPUID website, popular in the PC hardware community, was recently hacked and altered to deliver malicious versions of CPU-Z, HWMonitor, and PerfMonitor. CPU-Z, HWMonitor, and PerfMonitor provide essential PC hardware insights: CPU-Z delivers detailed system information on the processor,… Read More "CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads"
Security researchers have identified a surge in the misuse of mailbox rules within Microsoft 365 environments, with attackers increasingly relying on native email features to maintain access, exfiltrate data and manipulate communications after account compromise. The Proofpoint findings, published earlier… Read More "Mailbox Rule Abuse Emerges as Stealthy Post-Compromise Threat"
More than 70 civil liberties, domestic violence, reproductive rights, LGBTQ+, labor, and immigrant advocacy organizations are demanding that Meta abandon plans to deploy face recognition on its Ray-Ban and Oakley smart glasses, warning that the feature—reportedly known inside the company… Read More "Meta Is Warned That Facial Recognition Glasses Will Arm Sexual Predators"
The internet is full of claims that Microsoft’s LinkedIn is scanning users’ computers to fingerprint and profile LinkedIn users. Most people in the cybersecurity industry have now heard of BrowserGate. Fewer people will understand it. But in a search for… Read More "BrowserGate: Claims of LinkedIn ‘Spying’ Clash With Security Research Findings"
Ravie LakshmananApr 13, 2026Cybercrime / Threat Intelligence The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global phishing operation that leveraged an off-the-shelf toolkit called W3LL to steal thousands… Read More "FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts"
Researchers at Pillar Security have found two new critical vulnerabilities in self-hosted and cloud n8n deployments. N8n is a popular open-source workflow automation platform powering hundreds of thousands of enterprise AI systems worldwide. One of the flaws, tracked as CVE-2026-27493,… Read More "Critical Zero-Click Flaw in n8n Allows Full Server Compromise"
