‘Spring Ring’ Vishing Attack Uses Fake IT Calls on Microsoft Teams to Install Malware
A new Teams vishing campaign called Spring Ring used fake IT support calls to trick employees into installing remote-access tools (RAT) and malware.
Facebook Ads Promote Fake Streaming Apps Delivering PanDa RAT
Intel 471 says Chinese-speaking operators used fake streaming apps and Facebook ads to infect Android users with the PanDa RAT (remote access trojan).
Critical JFrog Artifactory Vulnerability Exploited Days After Disclosure
watchTowr reports attackers exploiting critical CVE-2026-82329 to obtain administrator tokens from vulnerable JFrog Artifactory servers.
Qilin Leaks 6.3GB of Alleged ATF Files, Then Pulls Download Links
Qilin published 6.3GB of alleged ATF case files and mobile forensic data, then removed download links that had remained online for most of Monday.
China-Nexus Fire Ant Hackers Target Cisco Routers, TACACS Servers for Espionage
Sygnia details Fire Ant attacks on Cisco routers, TACACS servers and Linux hosts used to steal credentials, collect traffic data and conceal malicious activity.
Fake Claude Opus 5 App Spreads New RevStealer Windows Malware
Cybersecurity firm Morphisec has uncovered a new Windows infostealer called RevStealer, which is being distributed through a fake…
Microsoft Warns of TerminalFix Campaign Hiding Malware in PNG Images
TerminalFix uses fake Cloudflare CAPTCHA pages to trick users into running PowerShell malware, creating reverse tunnels that provide access to internal systems.
Hackers Steal Identity, Vehicle Data from Latvia’s Road Traffic Safety Directorate
Hackers stole names, ID numbers, vehicle plates, addresses, and payment records belonging to 1.2 million people in Latvia’s CSDD data breach.
2 PaperCut NG/MF Zero-Days Exploited in Attacks, Emergency Patch Released
PaperCut NG and MF are under active attack as two zero-day flaws enable unauthenticated remote code execution, prompting an emergency patch.
US Disrupts Global Botnet Used by China-Linked QTFY Hackers
The FBI and DOJ disrupted a global botnet used by QTFY to compromise IoT devices and conceal attacks against US government agencies and critical infrastructure.