Malware Alert
Phishing Overtakes the Dark Web as the Biggest Source of Stolen Personal Data
Phishing and social engineering have overtaken the dark web as the primary source of stolen personal information, according to the 2026 Enterprise Social Engineering Report.…
Researchers Build Self-Replicating AI Malware That Learns and Adapts
Cybersecurity researchers at the University of Toronto have demonstrated a working prototype of an AI-powered computer worm that spreads autonomously between devices, learning and adapting…
A Single WhatsApp Notification Could Have Hacked Your Gemini AI, Research Finds
A single poisoned notification could have hijacked Google Gemini’s voice assistant on Android. The malicious message could come from WhatsApp, Slack, SMS, Signal, Instagram, or…
Hackers Find A Way to Access Sensitive Enterprise Mail Traffic
Critical security vulnerabilities were disclosed in SEPPmail Secure Email Gateway allowing attackers to achieve remote code execution and read arbitrary emails from virtual appliances. Experts…
This New Linux Malware Gives Hackers Easy Root Access
Security researchers disclosed Fragnesia, new Linux kernel local privilege escalation vulnerability tracked as CVE-2026-46300 with CVSS score 7.8. William Bowling of Zellic discovered flaw with…
Hackers Deploy Weaponized JPEG Files to Install Trojanized ScreenConnect Malware on Windows Systems
Cyfirma researchers identified Operation SilentCanvas campaign targeting Windows systems using fake JPEG files. The weaponized sysupdate.jpeg contains no image data but holds PowerShell scripts that…
Mini Shai-Hulud Worm Compromises Over 169 npm Packages
TeamPCP threat group launched coordinated supply chain attack compromising 169 npm packages on May 11, 2026. Mini Shai-Hulud worm targeted TanStack, Mistral AI, UiPath, OpenSearch,…
Fake OpenAI Repository Deploys Rust-Based Infostealer Malware on Windows Machines
A malicious Hugging Face repository impersonating OpenAI’s Privacy Filter reached number 1 on trending with 244,000 downloads in 18 hours. The fake Open-OSS/privacy-filter deployed Sefirah…
Universities Worldwide Postpone Exams After ShinyHunters Ransomware Attack on Canvas
A large-scale cyberattack has disrupted universities and schools across several countries, forcing educational institutions to suspend online services, cancel classes and restrict access to internal…
Cybersecurity Experts Warn Copy Fail Bug Affecting Linux Being Exploited in Active Hacking Campaigns
A critical Linux vulnerability known as Copy Fail has triggered a US government warning. The flaw allows attackers to gain root access across major distributions,…
SAP npm Packages Compromised in Mini Shai-Hulud Supply Chain Attack
Several official SAP npm packages were compromised in a supply chain attack that injected malware to steal developer credentials. The malicious code executes during installation,…
Researchers Uncover Pre-Stuxnet Fast16 Malware Targeting Engineering Software From 2005
Researchers have uncovered Fast16, a sophisticated malware dating back to 2005 that predates Stuxnet. The cyberweapon targeted engineering software, silently altering calculations to cause real-world…
Hackers Deploy SNOW Malware Suite via Microsoft Teams
A cyber group known as UNC6692 is targeting companies by impersonating IT helpdesk staff through Microsoft Teams. The attackers trick employees into installing malware, raising…
