Malware Alert
Hackers Are Draining 100,000 WordPress Sites Now
A security flaw in the Gravity SMTP plugin for WordPress is under active exploitation. Cybercriminals are abusing the bug, prompting urgent warnings for site owners…
Outdated Routers Are Being Hijacked Worldwide
A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers. The malware is turning them into proxies for malicious traffic. Researchers…
Operation Endgame Cleans 14,971 Infected WordPress Sites Worldwide
International law enforcement disrupted SocGholish, a malware network linked to Russia’s Evil Corp, cleaning 14,971 hacked WordPress sites and seizing 106 servers. Authorities urge WordPress…
How DragonForce Ransomware Hid in Plain Sight Using Microsoft Teams Infrastructure
A notorious ransomware group secretly infiltrated the network of a major US services firm for up to two months by hiding command-and-control traffic inside Microsoft…
Phishing Overtakes the Dark Web as the Biggest Source of Stolen Personal Data
Phishing and social engineering have overtaken the dark web as the primary source of stolen personal information, according to the 2026 Enterprise Social Engineering Report.…
Researchers Build Self-Replicating AI Malware That Learns and Adapts
Cybersecurity researchers at the University of Toronto have demonstrated a working prototype of an AI-powered computer worm that spreads autonomously between devices, learning and adapting…
A Single WhatsApp Notification Could Have Hacked Your Gemini AI, Research Finds
A single poisoned notification could have hijacked Google Gemini’s voice assistant on Android. The malicious message could come from WhatsApp, Slack, SMS, Signal, Instagram, or…
Hackers Find A Way to Access Sensitive Enterprise Mail Traffic
Critical security vulnerabilities were disclosed in SEPPmail Secure Email Gateway allowing attackers to achieve remote code execution and read arbitrary emails from virtual appliances. Experts…
This New Linux Malware Gives Hackers Easy Root Access
Security researchers disclosed Fragnesia, new Linux kernel local privilege escalation vulnerability tracked as CVE-2026-46300 with CVSS score 7.8. William Bowling of Zellic discovered flaw with…
Hackers Deploy Weaponized JPEG Files to Install Trojanized ScreenConnect Malware on Windows Systems
Cyfirma researchers identified Operation SilentCanvas campaign targeting Windows systems using fake JPEG files. The weaponized sysupdate.jpeg contains no image data but holds PowerShell scripts that…
Mini Shai-Hulud Worm Compromises Over 169 npm Packages
TeamPCP threat group launched coordinated supply chain attack compromising 169 npm packages on May 11, 2026. Mini Shai-Hulud worm targeted TanStack, Mistral AI, UiPath, OpenSearch,…
Fake OpenAI Repository Deploys Rust-Based Infostealer Malware on Windows Machines
A malicious Hugging Face repository impersonating OpenAI’s Privacy Filter reached number 1 on trending with 244,000 downloads in 18 hours. The fake Open-OSS/privacy-filter deployed Sefirah…
Universities Worldwide Postpone Exams After ShinyHunters Ransomware Attack on Canvas
A large-scale cyberattack has disrupted universities and schools across several countries, forcing educational institutions to suspend online services, cancel classes and restrict access to internal…
