Technology ❯ Cybersecurity ❯ Threat Actors

Malware

Exploitation Techniques Remote Access Tools TeamPCP Overstep Payment Skimmers PHP Backdoors ImageIO Vulnerability Social Engineering VShell Supershell

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

Public exploit code accelerated real-world attacks, according to Huntress.

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

CISA Flags BeyondTrust RCE as Used in Ransomware Attacks

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

North Korea–Linked Group Uses Deepfake Calls to Infect Crypto Workers’ Macs

Trust Wallet Ties $8.5 Million Chrome Extension Theft to Shai-Hulud Supply-Chain Breach

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

AI Pentest Tool 'Villager' Nears 11,000 PyPI Downloads as Researchers Flag Abuse Risk

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

SonicWall Blames Patched CVE-2024-40766 for Akira Ransomware Attacks

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts