Cybersecurity researchers have uncovered a new blockchain-based technique that allows attackers to hide malware command-and-control (C2) server addresses in a way that is even more difficult to detect than previous methods. The technique, dubbed NullReceiver, was discovered in two malicious…
Cybersecurity researchers have uncovered a new supply chain attack involving malicious packages uploaded to the Python Package Index (PyPI) repository that secretly install a previously undocumented malware strain called ZiChatBot on both Windows and Linux devices. According to researchers at…
ThreatsDay 2026: New Malware, AI-Powered Cyber Threats, Supply Chain Attacks, and Critical Security Flaws Dominate the Week The cybersecurity world had another chaotic week as researchers uncovered new malware campaigns, critical software vulnerabilities, large-scale phishing operations, and growing concerns over…
Microsoft has revealed details of a large-scale phishing campaign that tricked tens of thousands of users into handing over their login credentials by using convincing internal-style emails and advanced evasion tactics. The attack, observed between April 14 and April 16,…
Cybersecurity researchers are warning that attackers are already exploiting a serious flaw in the open-source CMS MetInfo CMS, putting thousands of websites at risk. The vulnerability, tracked as CVE-2026-29014, carries a high severity score of 9.8 and allows attackers to…
The Apache Software Foundation (ASF) has rolled out security updates to fix multiple issues in its HTTP Server, including a high-risk vulnerability that could allow attackers to execute code remotely. The flaw, tracked as CVE-2026-23918 and rated 8.8 on the…
A cyber campaign known as Contagious Interview, believed to be linked to North Korean threat actors, is expanding its reach by planting malicious packages across several major developer ecosystems. Security researchers have discovered that the attackers are disguising malware as…
A Russia-linked threat group known as APT28 has launched a new wave of targeted attacks against Ukraine and its international partners, deploying a previously unknown malware framework called PRISMEX. Security researchers report that the campaign has been active since at…
A newly identified threat group, tracked as UAT-10362, has been linked to targeted spear-phishing attacks against organizations in Taiwan, including non-governmental organizations (NGOs) and likely academic institutions. The campaign introduces a previously unseen Lua-based malware named LucidRook. According to research…
Multiple China-Linked Groups Target Southeast Asian Government in Coordinated Operation Cybersecurity researchers have uncovered a large-scale cyber espionage campaign targeting a government organization in Southeast Asia. The operation appears to involve multiple threat groups with ties to China, working in…
