Malware

An Israeli advertising company, DiscoverTech, has been secretly facilitating the placement of spyware on popular websites, enabling cyberattacks against at least 45 devices at Al Jazeera.

The threat actor Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).

New versions of the Aoki infostealer are targeting credential and session files used by popular AI coding assistants, a new report by Symantec warned.

A threat actor uploaded malicious packages to the Arch User Repository (AUR), impersonating popular Arch Linux helper tools like yay and paru.

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers.

Authorities in North Macedonia have filed charges against the alleged administrator of OLVX, a cybercrime marketplace that sold stolen personal data and malicious tools since 2023.

Small AI models are nearing the capability to autonomously replicate across networks of inexpensive, poorly secured Internet of Things (IoT) devices, according to a recent report by Security Affairs.