Malware

A sophisticated threat actor was observed exploiting a security vulnerability in Fortinet FortiOS to deploy a novel memory-resident ARM64 malware known as PEERSTITCH.

A new malware strain named KGB RAT is weaponizing fear tactics, including fake Blue Screens of Death and jump scares, to target Windows users.

An Israeli advertising company, DiscoverTech, has been secretly facilitating the placement of spyware on popular websites, enabling cyberattacks against at least 45 devices at Al Jazeera.

The threat actor Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).

New versions of the Aoki infostealer are targeting credential and session files used by popular AI coding assistants, a new report by Symantec warned.

A threat actor uploaded malicious packages to the Arch User Repository (AUR), impersonating popular Arch Linux helper tools like yay and paru.

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers.