Key Takeaways Cloud malware avoids files, running in memory and abusing cloud-native services to evade legacy antivirus Attackers exploit misconfigured IAM, APIs, storage, and legitimate management tools for stealthy persistence Fileless execution, living-off-the-land techniques, and encrypted cloud C2 now dominate… Read More "Inside Cloud Malware Analysis: Techniques and Real-World Use Cases"
Ravie LakshmananFeb 20, 2026Vulnerability / Cyber Attack Threat actors have been observed exploiting a recently disclosed critical security flaw impacting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) products to conduct a wide range of malicious actions, including deploying… Read More "BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration"
The attackers have also created signed executables that impersonate installers for widely used software such as Zoom, Microsoft Teams, Adobe Reader, and Google Meet, with matching icons and metadata. Victims are encouraged to download them by clicking on a link… Read More "Don’t trust TrustConnect: This fake remote support tool only helps hackers"
Ransomware rages on and no organization is too small to be targeted by cyber-extortionists. How can your business protect itself against the threat? 20 Oct 2025 According to Verizon’s 2025 Data Breach Investigations Report (DBIR), no less than 44 percent… Read More "Cybersecurity Awareness Month 2025: Building resilience against ransomware"
A multi-stage phishing campaign is using a sneaky technique to evade detection by security tools and harvest corporate credentials for well-known cloud storage services, researchers have warned. Forcepoint X-Labs issued an alert about the ongoing campaign on February 2, which… Read More "New Password-Stealing Phishing Campaign Targets Dropbox Credentials"
Posted by Dave Kleidermacher, VP Engineering, Android Security & Privacy Today marks a watershed moment and new benchmark for open-source security and the future of consumer electronics. Google is proud to announce that protected KVM (pKVM), the hypervisor that powers… Read More "Android’s pKVM Becomes First Globally Certified Software to Achieve Prestigious SESIP Level 5 Security Certification"
If you operate containers on AWS you’re likely familiar with how vulnerabilities can accumulate. The majority of container images currently include least one critical security flaw. Frequently hidden within a base image or an overlooked dependency. This makes enhancing your AWS container security essential. It’s the method to prevent problems such, as data… Read More "AWS ECR Scanning: The Practical Guide to Securing Your Containers"
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily install OpenClaw, a self-hosted autonomous AI agent that has become exceedingly popular in the past few months. “On February 17,… Read More "Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems"
The business social networking site is a vast, publicly accessible database of corporate information. Don’t believe everyone on the site is who they say they are. 16 Jan 2026 • , 4 min. read In November, Britain’s Security Service began… Read More "Why LinkedIn is a hunting ground for threat actors – and how to protect yourself"
ESET researchers have identified an Android malware implant that uses generative AI (GenAI) for persistence purposes. This malicious implant is an advanced version of VNCSpy, a piece of malware that appeared on VirusTotal in January 2026 and was represented by… Read More "Android Malware Hijacks Google Gemini to Stay Hidden"
