#news


BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Sep 15, 2026 // 18:30

Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows […]

BambooToken malware controls Windows and Linux systems via MQTT

Sep 15, 2026 // 18:16

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with […]

Hackers target WordPress sites via third-party WooCommerce plugin

Sep 15, 2026 // 17:56

Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. The flaw is […]

What Zero-Day Response Should Be in the Post-Mythos Era

Sep 15, 2026 // 16:56

By Sila Ozeren Hacioglu, Security Research Engineer at Picus Security. If you run PaperCut NG or MF, the last week of August showed what vulnerability […]

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

Sep 15, 2026 // 15:16

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability […]

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Sep 15, 2026 // 15:01

With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig […]

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Sep 15, 2026 // 14:30

Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the […]

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Sep 15, 2026 // 14:20

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at […]

Suspected Black Axe gang leaders face cybercrime charges in the US

Sep 15, 2026 // 12:56

Five alleged leaders of the Black Axe cybercrime syndicate, known for its involvement in global-scale cyber-enabled financial fraud, have been extradited to the United States […]

Cisco patches Secure Email Gateway zero-day exploited in attacks

Sep 15, 2026 // 11:37

Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. “In September 2026, the […]

Previous 1 … 34 35 36 37 38 … 388 Next