StyleSmuggler: Magento Hotfix Expands, Backdoors Still Need Removal
Adobe expands StyleSmuggler hotfix support. See how a failed-payment email leads to a server backdoor, and why patches and credential rotation are separate jobs.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 4, 2026
Latest reports
OfferLoader: Fake Installers Can Deliver Several Malware Payloads
A new Unit 42 report links OfferLoader to fake gaming tools and WinDirStat installers. Learn why removing one payload may leave others behind.
BigBear 2.0 Phishing: What to Do After Microsoft 365 MFA
BigBear 2.0 phishing can steal Microsoft 365 sessions after MFA. What to report, how to contain session access, and why authentication fallback matters.
Claude Code Auto Mode: Check What an Approved Command Can Reach
A controlled Opus 5 test turned a website summary into code execution. Review imports, sandbox limits and child processes without treating a small sample…
Virtualizor BGP Hijack: Check the Server After the Update
A valid certificate accompanied a malicious Virtualizor update. Check the vendor indicator, preserve evidence and review server access separately from billing credentials.
AI-Assisted Intrusion: Stolen Cloud Keys Outlive a Blocked Change
Unit 42 corrected its account to an intrusion. Review stolen credentials and build authority even when branch protection blocks a malicious Terraform change.
ASCII Smuggling Phishing: What to Do With a Funding Email
Invisible characters can hide financial lure words from simple filters. Verify the offer, preserve the original email and respond to the information you disclosed.
PackClient RAT: A Tax Notice Can Leave Persistent Access
PackClient tax lures deliver a Windows RAT with a restart guard. Check what ran, remove persistent components and verify any newly installed management agent.
StreamRat Android Trojan: Stop the Fake Streaming Install
StreamRat installers can block Internet access while seeking phone control. Check which installation and permission steps occurred, then separate cleanup from account recovery.