BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware
FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware.
Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages
Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s researchers say.
Polymarket Users Lose $2.7 Million in Third-Party Script Hack
Polymarket confirms $2.7 million stolen through the compromised third-party script and pledges $3.9 million in refunds, including compensation for pause losses.
TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs
A vulnerability in TeamViewer could let attackers run code on an IT support technician’s computer when the technician…
Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to developers’ Windows PCs through NetSupport.
EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft
EMBRACE affects AI coding tools Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop, enabling code execution, file theft and browser address-bar spoofing.
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records…
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…
Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation
Microsoft releases emergency .NET updates to fix a Brotli memory flaw and Linux privilege escalation, while correcting two incomplete October security patches.