Malware

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities affecting Fortinet products and BeyondTrust Remote Support to its Known Exploited Vulnerabilities (KEV) catalog.

A sophisticated phishing scheme has been uncovered where a fake WatchGuard VPN website successfully stole administrator credentials by posing as a legitimate download portal.

A new and concerning zero-click spyware campaign was uncovered, which targets journalists and operates by delivering malware through online advertisements without requiring any user interaction.

A sophisticated threat actor was observed exploiting a security vulnerability in Fortinet FortiOS to deploy a novel memory-resident ARM64 malware known as PEERSTITCH.

A new malware strain named KGB RAT is weaponizing fear tactics, including fake Blue Screens of Death and jump scares, to target Windows users.