News desk
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 4, 2026
Short TikTok and Instagram Reels tutorials are being used to lure Windows users into PowerShell commands and download pages that can deliver Vidar stealer. Here is what to check if you followed one.
A compromised Hola Browser Windows delivery path was found delivering me.exe, a cryptominer that creates HolaMonitorService.exe and hola_monitor_svc. Check these indicators and remove persistence…
Nimbus RAT now rides a Teams vishing and Quick Assist chain. See the email-flood warning signs, Windows artifacts, and response steps to check first.
CISA added Mirasvit Cache Warmer CVE-2026-45247 to KEV. Check affected Magento stores, update to 1.11.12, and review logs for CacheWarmer cookie exploitation.
DesckVB RAT malspam abuses DoubleClick redirects before dropping a ZIP, script loader, and .NET RAT. Check what to do if you opened the attachment.
Kirki 6.0.0 through 6.0.6 can let unauthenticated attackers route password reset links to their own inbox. Update to 6.0.7 or later and audit administrator…
WeedHack hides in fake Minecraft mods and JAR files. Learn the Defender detection, persistence clues, safe removal steps, and account recovery.
CVE-2025-48595 has limited targeted exploitation signals. Check NVD details, PoC/exploit status, June 2026 Android patch level, and APK risk.
GoDaddy says WordPress malware hides C2 data in Steam profile comments. Check for hello-mywordl.info, injected scripts, and PHP backdoors.
