OptinMonster CDN Backdoor Checks
WordPress sites using OptinMonster, TrustPulse, or PushEngage should check for rogue admin users, hidden backdoor plugins, and suspicious logs after the June 2026 CDN script tampering.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 24, 2026
Latest reports
Ghost-Sender Spoofing
Ghost-Sender shows how Exchange Online tenants with external MX gateways can receive spoofed internal-looking mail. Check the risk and safe mitigations.
Chrome CVE-2026-11645 Zero-Day
Google fixed Chrome CVE-2026-11645, a V8 flaw with an exploit in the wild. Update Chrome 149, relaunch the browser, and verify the version.
Argamal RAT in Game Archives
Kaspersky found Argamal RAT hidden in trojanized adult-game downloads. Check ZIP archives, modified ffmpeg.dll files, natives2_blob.bin, persistence, and stolen-session risk.
Polyfill.io Login Prompt
Suspicious polyfill.io authentication prompts appeared on websites including MUJI and Toshiba pages. Here is what users and site owners should do.
Hola Browser Miner
A compromised Hola Browser Windows delivery path was found delivering me.exe, a cryptominer that creates HolaMonitorService.exe and hola_monitor_svc. Check these indicators and remove persistence…
Nimbus RAT Teams Vishing
Nimbus RAT now rides a Teams vishing and Quick Assist chain. See the email-flood warning signs, Windows artifacts, and response steps to check first.
Mirasvit Cache Warmer RCE
CISA added Mirasvit Cache Warmer CVE-2026-45247 to KEV. Check affected Magento stores, update to 1.11.12, and review logs for CacheWarmer cookie exploitation.
DesckVB RAT Malspam
DesckVB RAT malspam abuses DoubleClick redirects before dropping a ZIP, script loader, and .NET RAT. Check what to do if you opened the attachment.