OTTERCOOKIE Malware Hides in SVG Files in Fake Coding Tests
Fake coding-test repositories hide OTTERCOOKIE fragments in SVG flags. Here is what…
Spirals Ransomware Encrypts Networks in Under 24 Hours
Symantec documented a Spirals ransomware attack that moved from an exposed IIS…
Avalon Malware Turns Legal Documents Into CrownX Ransomware
Avalon malware uses legal-document lures, ISO images, LNK shortcuts, and MSBuild before…
FBI Seizes NetNut/Popa Botnet: Check Your TV Box
The FBI seized NetNut/Popa botnet domains. Learn why smart TVs and streaming…
Fake Software Downloads Push ScreenConnect and AsyncRAT
Fake software download sites can bundle ScreenConnect and AsyncRAT. Check downloaded archives,…
Onelogon Netlogon Attack: Check AD Allow-Lists Now
Onelogon shows how legacy Netlogon allow-lists can expose Active Directory accounts. Learn…
Potemkin Loader Turns ClickFix Into 11-Host Intrusion
A ClickFix command dropped Potemkin Loader, RMMProject and EtherRAT across 11+ hosts.…
Ghost CMS Exploit Poisons 700 Sites for ClickFix Malware
Attackers are exploiting Ghost CMS CVE-2026-26980 to inject ClickFix loaders into trusted…
Laravel-Lang Composer Packages Rewritten to Steal CI Secrets
Laravel-Lang Composer packages were compromised through rewritten tags that run a PHP…
Grafana Says Missed Token Let Attackers Copy Private Repos
Grafana says attackers copied two private GitHub repositories after one workflow token…