5+ day, 22+ hour ago   (391+ words) Microsoft has released its September 2026 security updates, fixing two Windows elevation-of-privilege vulnerabilities that attackers are already exploiting in the wild. The company’s broader Patch Tuesday release addresses 974 CVEs across its products, including 723 affecting Windows. The two actively exploited flaws are…...

1+ week, 5+ day ago   (482+ words) Socket’s Threat Research Team uncovered the packages on Packagist, where they were disguised as themes for OphimCMS and KKPhim, two Laravel-based content management systems used by Vietnamese movie and comic streaming websites. The malicious themes were published across five Packagist…...

2+ week, 6+ min ago   (259+ words) RevStealer malware is being distributed through trojanized Electron applications, including a GitHub project masquerading as a free desktop version of Anthropic’s Claude Opus 5. The malware steals browser data, password-manager files, cryptocurrency wallets, credentials, and documents while using multiple techniques to…...

2+ week, 2+ day ago   (459+ words) The ShinyHunters threat group claims it compromised McKesson and obtained data on over 284 million patient records, including highly sensitive medical, identity, prescription, and healthcare provider information. CyberInsider reviewed samples privately provided by the threat actor that appear consistent with the…...

3+ week, 3+ day ago   (333+ words) Android malware is spreading through the built-in firmware update mechanism of automotive head units, turning the devices into nodes for ad fraud and a residential proxy botnet. Kaspersky reports this is the first documented malware campaign with an infection chain…...

3+ week, 3+ day ago   (324+ words) A new malware family dubbed SynkLoader uses a fake Windows lock screen to steal users’ login passwords before giving attackers remote access to corporate networks. The modular malware combines Python, PowerShell, C#, and C++ components, with many payloads executed only…...