Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
F5 BIG-IP malware hides web shells in memory to evade detection
3+ day, 6+ hour ago (78+ words) scworld.com F5 BIG-IP malware hides web shells in memory to evade detection An In-Depth Guide to Network Security MikroTik routers targeted by active SSH zero-day exploitation Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR HPE patches ArubaOS-CX switches…...
npm Supply Chain Worm Returns After Four-Month Dormancy With Same Malicious Payload
4+ day, 20+ hour ago (330+ words) A previously documented Shai-Hulud npm supply-chain worm payload has reportedly reappeared after 111 days of inactivity, using the exact same malicious file linked to the May 19 compromise of hundreds of @AntV package versions. The reactivation raises concerns about registry-level malware detection…...
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
4+ day, 12+ hour ago (1507+ words) Following the initial investigation, we decided to hunt for similar WebDAV and ordinal-execution patterns in an attempt to recover the full infection chain. Using VirusTotal, we were able to identify a full chain from a second DLL loader named "pf....
Shai-Hulud Malware Returns to npm Unchanged, 111 Days After Its Hash Was Fingerprinted
4+ day, 17+ hour ago (507+ words) Four packages is a small blast radius next to the 639 malicious versions pushed during the May campaign. The significance sits elsewhere. npm rolled out publish-time scanning in July, a control that briefly holds new publications for automated analysis before they…...
PoisonedRefresh Malware Hides Inside Apache Memory While F5 BIG-IP Files Stay Clean
5+ day, 3+ hour ago (546+ words) A conventional web shell is a small PHP, JSP, or ASP script dropped into a directory the web server can reach. That approach is noisy by design. It leaves behind modified files, unexpected scripts, changed hashes, and odd POST parameters,…...
Fake software installers use msiexec to bypass defenses and persist on Windows – 4sysops
5+ day, 9+ hour ago (21+ words) Microsoft is tracking an active fake software campaign that regenerates malicious archives behind familiar download filenames, then uses Windows components such...
New SynkLoader malware distributed via Microsoft Teams phishing
5+ day, 11+ hour ago (109+ words) The SynkLoader malware operates through a multi-stage process, beginning with convincing Microsoft Teams messages that mimic IT support communications. These messages aim to lure recipients into downloading and executing malicious files. Once activated, SynkLoader presents a fake Windows lock screen,…...
JSCeal Hides Crypto Malware in V8 Bytecode
5+ day, 16+ hour ago (764+ words) Why AI Agent Sandboxes Are Failing Security Tests Berlin Ransomware Leak Exposes State Secrets Your MikroTik Router May Already Be Compromised: Look for SSH User “-2” AI Agents Hijacked German Wiki to Cheat, OpenAI Delayed Disclosure Security Affairs newsletter Round 593 by…...
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
1+ week, 2+ day ago (665+ words) Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put…...
Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware
1+ week, 3+ day ago (867+ words) Hackers Target Langflow in CVE-2026-0768 Attacks Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records Five Venezuelan Nationals Plead Guilty in Kansas ATM Jackpotting Attempt North Korea-linked IT Workers Are Getting Hired Inside Western Companies U.S. CISA adds PaperCut NG/MF…...