PEERSTITCH Hid Inside FortiGate After a Management Breach
Unit 42 traced stolen configurations for 500+ firewalls, reused credentials and a…
Linux Spies Copied Sudo Passwords Before Running the Real Command
Unit 42 traces AI-assisted Linux espionage through a sudo password trap, PHP…
NeedyMantis Hides Its Next Stage Behind Familiar DLL Names
Microsoft traces NeedyMantis through planted DLLs, an extensionless archive and a fake…
GEEKOM Driver Malware: Check the Legacy LAN Package
GEEKOM removed a malware-flagged installer from old LAN driver archives. Check the…
CVE-2026-72529 and CVE-2026-72530 Exploited in TrueConf Server
CISA says two TrueConf Server flaws are actively exploited. Check fixed versions,…
BdThemes Plugins Installed Backdoors Through a Poisoned API
Seven BdThemes WordPress plugins loaded a poisoned remote feed that created rogue…
QuickFox VPN Malware Installed the FDMTP Backdoor
QuickFox Windows installers delivered the FDMTP backdoor. Check affected versions, local indicators,…
Arch Freezes AUR Pushes After Malware Wave: Check Your System
Arch temporarily stopped AUR pushes after malicious package takeovers. Check openconnect-sso exposure,…
macOS.Gaslight Malware Removal and Account Recovery
macOS.Gaslight is a Rust backdoor and stealer. Check its LaunchAgent and XProtect…
SvcHostUpdate.exe in Startup: The MythicalsGames Backdoor
SvcHostUpdate.exe in Windows Startup matches a malicious web3-token-helper chain. Learn what the…
ClickLock Stealer Mac Removal: Stop the Password Trap
ClickLock keeps closing Mac apps and demanding a password. Regain control, check…
HOLLOWGRAPH Malware Hides in Microsoft 365 Calendar Events
HOLLOWGRAPH uses Microsoft 365 calendar events dated 2050 for command-and-control and file…