Malware Alert
Hackers Find A Way to Access Sensitive Enterprise Mail Traffic
Critical security vulnerabilities were disclosed in SEPPmail Secure Email Gateway allowing attackers to achieve remote code execution and read arbitrary emails from virtual appliances. Experts…
This New Linux Malware Gives Hackers Easy Root Access
Security researchers disclosed Fragnesia, new Linux kernel local privilege escalation vulnerability tracked as CVE-2026-46300 with CVSS score 7.8. William Bowling of Zellic discovered flaw with…
Hackers Deploy Weaponized JPEG Files to Install Trojanized ScreenConnect Malware on Windows Systems
Cyfirma researchers identified Operation SilentCanvas campaign targeting Windows systems using fake JPEG files. The weaponized sysupdate.jpeg contains no image data but holds PowerShell scripts that…
Mini Shai-Hulud Worm Compromises Over 169 npm Packages
TeamPCP threat group launched coordinated supply chain attack compromising 169 npm packages on May 11, 2026. Mini Shai-Hulud worm targeted TanStack, Mistral AI, UiPath, OpenSearch,…
Fake OpenAI Repository Deploys Rust-Based Infostealer Malware on Windows Machines
A malicious Hugging Face repository impersonating OpenAI’s Privacy Filter reached number 1 on trending with 244,000 downloads in 18 hours. The fake Open-OSS/privacy-filter deployed Sefirah…
Universities Worldwide Postpone Exams After ShinyHunters Ransomware Attack on Canvas
A large-scale cyberattack has disrupted universities and schools across several countries, forcing educational institutions to suspend online services, cancel classes and restrict access to internal…
Cybersecurity Experts Warn Copy Fail Bug Affecting Linux Being Exploited in Active Hacking Campaigns
A critical Linux vulnerability known as Copy Fail has triggered a US government warning. The flaw allows attackers to gain root access across major distributions,…
SAP npm Packages Compromised in Mini Shai-Hulud Supply Chain Attack
Several official SAP npm packages were compromised in a supply chain attack that injected malware to steal developer credentials. The malicious code executes during installation,…
Researchers Uncover Pre-Stuxnet Fast16 Malware Targeting Engineering Software From 2005
Researchers have uncovered Fast16, a sophisticated malware dating back to 2005 that predates Stuxnet. The cyberweapon targeted engineering software, silently altering calculations to cause real-world…
Hackers Deploy SNOW Malware Suite via Microsoft Teams
A cyber group known as UNC6692 is targeting companies by impersonating IT helpdesk staff through Microsoft Teams. The attackers trick employees into installing malware, raising…
Adobe Patches PDF Zero-Day That Hackers Exploited for Four Months
Adobe has patched a critical zero-day vulnerability in its PDF software that hackers exploited for months. The flaw allowed attackers to install malware and potentially…
GlassWorm Escapes JavaScript Sandbox to Silently Spread Across Developer Tools
A new GlassWorm variant hides inside a fake VS Code extension, uses a Zig-compiled binary to escape the JavaScript sandbox, and silently infects every IDE…
This Botnet Deliberately Avoids Detection to Keep Its DDoS Business Running
Cybersecurity researchers have exposed Masjesu, a stealthy botnet that has been marketed on Telegram as a DDoS-for-hire service since 2023. The botnet targets IoT devices…
