168 matches found
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns
A new, stealthy backdoor named Mistic has been deployed as part of suspected financially motivated attacks aimed at multiple organizations spanning insurance, education, IT, and professional services sectors since April 2026. According to Symantec and Carbon Black's Threat Hunter Team, the...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel before version 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. This could lead to an out-of-bounds write vulnerability...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: habanalabs: fixed a possible memory leak in MMU DR fini. This patch corrects what appears to be a copy-paste error. A memory leak will occur if the host-resident shadow is NULL which is likely to happen since the DR and HR are no...
CVE-2026-11515 SourceCodester Barangay Resident Profiling and Information Management System Password Reset passsword_reset.php hard-coded password
A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The impacted element is an unknown function of the file passswordreset.php of the component Password Reset Handler. Such manipulation of the argument newpassword with the input...
Fileless Multi-Stage Remcos RAT: From Phishing to Memory-Resident Execution
Fileless Multi-Stage Remcos RAT: From Phishing to Memory-Resident Execution By Madhini Muralidharan · March 11, 2026 Traditional malware campaigns rely heavily on dropping executable files to disk—artifacts that defenders can scan, quarantine, and analyze with signature-based security tools. Mode...
FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6
The 30-year-old Virginia resident evaded capture for years after authorities discovered pipe bombs planted near buildings in Washington, DC, the day before the January 6, 2021, Capitol attack...
Fileless protection explained: Blocking the invisible threat others miss
Most antivirus software for personal users scans your computer for malware hiding in files. This is, after all, how most malware is traditionally spread. But what about attacks that never create files? Fileless malware is a fast-growing threat that evades traditional antivirus software, because...
Siemens SIMATIC S7-1500 Observable Discrepancy (CVE-2018-0495)
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...
EUVD-2025-78435
Malicious code in residentroundwormz3n npm...
EUVD-2025-78436
Malicious code in residentfrogz3n npm...
EUVD-2025-80737
Malicious code in residentgopherreplicateautomation npm...
EUVD-2025-80736
Malicious code in residenthawkreplicateautomation npm...
EUVD-2025-80734
Malicious code in residentsolereplicateautomation npm...
MAL-2025-107928 Malicious code in resident_eagle_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bca7bb39cf53128c284eaf2a7fd7c7afb2831d6d8c637324798b9b70044ec2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-89938 Malicious code in resident_mosquito_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87869f620077910817fc5d82c9e55838c4e148bb8a5cbc835e56f80d83a58f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-67315
Malicious code in residentzebraz3n npm...
Malicious code in resident-aquamarine-krill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c990d9fb26b1d85f36c3951b427ea6ff2b8cf570a31326196291a2761ea98cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52307
Malicious code in resident-aquamarine-krill npm...