For years, cybersecurity practitioners have tracked different types of malware and detected potential infections using digital fingerprints to identify different hacking tools and follow their use over time. As attackers are increasingly incorporating agentic AI components into their hacking tools,… Read More "A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight"
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
A Venezuelan national believed to be a leader of Tren de Aragua (TdA)’s ATM jackpotting activities and the developer of the infamous Ploutus ATM malware has been arrested. According to the US, TdA is a violent transnational criminal organization that… Read More "FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware"
Long-Running NPM Malware Campaign Accumulates 40,000 Downloads
Malicious packages published as part of a long-running NPM supply chain campaign have accumulated over 40,000 downloads, Checkmarx reports. Dubbed MALFEX and distributing malware such as the Overlord RAT and infostealers, the campaign has been ongoing since August 2023, when… Read More "Long-Running NPM Malware Campaign Accumulates 40,000 Downloads"
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
A recently discovered Linux backdoor turns infected systems into proxies that use the Session Traversal Utilities for NAT (STUN) protocol and contains exploits for self-propagation, FortiGuard Labs reports. Dubbed ClingSTUN and functioning as a back-connect proxy backdoor, the malware targets… Read More "Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws"
Treasury Blacklists Most-Wanted ATM Malware Developer and His Network
The US Treasury Department has sanctioned the alleged developer of malware used in ATM jackpotting attacks linked to Tren de Aragua (TdA), along with members of his network and two Mexico-based companies. Anibal Alexander Canelon Aguirre, known as ‘Prometheus,’ was… Read More "Treasury Blacklists Most-Wanted ATM Malware Developer and His Network"
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
A newly discovered ClickFix campaign is relying on ChatGPT Custom GPTs to impersonate legitimate products and lure victims into executing malicious code on their machines. Custom GPTs are personalized versions of ChatGPT that may include specific instructions and tools. They… Read More "Hackers Use ChatGPT Custom GPTs in ClickFix Attacks"
Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft
Microsoft has analyzed a malware framework used by a China-based threat actor in attacks against telecommunications and governmental organizations. Dubbed NeedyMantis, the framework was discovered during the follow-on analysis of indicators of compromise (IoCs) associated with the May 2026 Daemon… Read More "Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft"
Overview of System Vulnerabilities and Threats
Understanding system vulnerabilities, threats, and countermeasures is essential for maintaining a secure computing environment. In this regard, this article discusses some of the key vulnerabilities and threats that concern emanations, covert channels, backdoors, malicious code, server-side and client-side attacks, web… Read More "Overview of System Vulnerabilities and Threats"