Lazarus Exploits a Windows Zero-Day to Gain SYSTEM Privileges
Check Point Research attributes a cyber-espionage campaign targeting defense and aerospace companies in France, Germany, Brazil, and India to the Lazarus
APT
More news
Page 7 / 9 · 77 articles
Lazarus Exploits a Windows Zero-Day in a Fake Job Offer Campaign
Lazarus group exploits Windows zero-day in fake job campaign targeting defense. Microsoft patched CVE-2026-68820; update now.
Kimsuky Prepares an Offline AI Stack to Enhance Phishing, Malware, and Data Collection
Genians attributes the preparation of infrastructure for running artificial intelligence tools offline to Kimsuky, a North Korean unit subordinate to the
Coruna and DarkSword: Advanced iOS Exploits Fall into Cybercriminal Hands
The Coruna and DarkSword iOS exploit chains, initially associated with state-sponsored actors and mercenary surveillance vendors, are now spreading among
Sandworm Used a Private APN to Target a Polish Power Plant
CERT.PL details Sandworm group using a private APN to target a Polish CHP plant, damaging ICS devices without causing a blackout.
Cybersecurity: Five Emerging Risks, from U.S. Telecommunications to Coding Agents
Explore five emerging cybersecurity threats, including Chinese presence in U.S. telecom, SideWinder malware, and npm supply chain attacks, targeting persistent access.
Compromised QuickFox Installers: FDMTP Backdoor Targets Windows Users
FortiGuard Labs identifies supply chain attack in QuickFox VPN installers, delivering FDMTP backdoor to Windows users since August 2025. Mitigation steps provided.
CaptiveCrunch: Midnight Blizzard Targets Public Wi‑Fi to Steal Microsoft 365 Credentials
Midnight Blizzard's CaptiveCrunch campaign hijacks public Wi-Fi captive portals to steal Microsoft 365 credentials using device code phishing and custom malware tools.
DarkSword, the iOS Exploit Kit Code Is Public: A Campaign with 100 Lure Sites Targets Those Who Don’t Update
The leaked DarkSword iOS exploit kit code fuels a campaign using 100+ AWS and Apple ID lure sites to deliver GHOSTBLADE malware and steal user credentials.