Fake Exodus Installer Hides a RAT Behind a Wallet That Never Opens
A fake Exodus installer runs the wallet invisibly while a RAT steals browser data and enables remote access. Check the path, task, and recovery steps.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
September 13, 2026
Latest reports
Claude Sessions Stolen by Infostealers Drain Usage
Anthropic warns that infostealers are stealing Claude sessions and draining usage. Learn how to revoke access, clean the device, and secure other accounts.
McKesson Data Breach: What Is Confirmed So Far
McKesson confirms data theft tied to a subset of Oncology & Multispecialty and Medical-Surgical customers. See what is confirmed and what to do.
.vu Phishing Surge Uses 1,660 Domains to Steal Accounts
A .vu phishing operation used 1,660 short-lived domains and AiTM login relays. Learn the warning signs and what to do after a click or…
Carhartt Data Breach Exposes 12.9 Million Accounts
The validated Carhartt breach contains 12.9 million accounts with names, emails, phone numbers, and addresses, but no listed passwords.
TerminalFix Turns Fake CAPTCHA Into a Network Tunnel
Microsoft says TerminalFix uses a fake CAPTCHA, PowerShell, DLL sideloading, and a reverse tunnel. Check these artifacts if the command ran.
FBI Disrupts QTFY Router Botnet Behind China-Linked Attacks
The FBI and DOJ disabled QTFY’s QScan and QTRouter platforms. Compromised routers and IoT devices hid attacks on critical infrastructure.
Klever Fixes 2 Critical KLV Minting Flaws
Klever-Go flaws CVE-2026-54754 and CVE-2026-54755 could create unbacked KLV. One was exploited in June; version 1.7.19 fixes both.
WatchGuard Fixes 4 Critical Firebox RCE Flaws
WatchGuard fixed four critical Firebox RCE flaws in Fireware 2026.2.2, 12.12.2 and 12.5.20. Check exposure, update, and review device evidence.