Banking malware is hiding in WebRTC traffic on Windows while Android RATs spread via fake Google Play pages.

Grandoreiro targets Portugal, Spain, and Mexico using DLL side-loading.

BTMOB targets Brazil with phishing, remote control, and banking theft features.

Malware that can’t be taken down?

Void Botnet — Rust loader using Ethereum smart contracts for seizure-resistant C2.

Built by TheVoidStl, sold on crime forums. ~1.5MB Windows binary with dual modes:

Blockchain: Commands via smart contract, bots poll RPCs (3-5 min)

MuddyWater hit 9 countries.

Hacking group targeted 9 organizations using signed Fortemedia and SentinelOne binaries to sideload malware, steal Chrome data, and quietly maintain access inside victim networks.

Attackers exploited CVE-2026-5426 in the KnowledgeDeliver LMS to gain unauthenticated RCE through hard-coded ASP-NET machineKeys, deploy the Godzilla (BLUEBEAM) web shell, and deliver Cobalt Strike Beacon on vulnerable internet-facing systems.

Samsung plans to launch its first chip testing factory in Vietnam with a $1.5 billion investment.

Artificial intelligence can now extract fingerprints from selfies

Experts have warned that hackers may use artificial intelligence to reconstruct individuals' fingerprints from high-quality selfies.

AI uncovered a 27-year-old bug in OpenBSD that survived decades of human audits.

Pentagon Urged to Limit Mobile Tracking and Chrome Usage Over Security Risks.

CENTCOM Warns of GPS Data Exploitation Targeting U.S. Troops
Lawmakers Raise Alarm Over Location Data Used for Drone and Missile Targeting.

Cyberattacks Against Israel Surge by 55% in 2025, National Report Finds.

DuckDuckGo Downloads Jump 30% Amid Backlash to Google AI Features.

AI-Driven Cyberattacks Increasingly Target U.S. Critical Infrastructure.

Meta Launches Paid “Plus” Subscriptions for Instagram and WhatsApp.

“God’s Gladiators” Threaten Cyberattacks on Pro-Israel Institutions.

Hackers Leak Personal Data of 300+ U.S. Biotech Researchers.

FIFA World Cup 2026 Scams Begin to Surge

Cybercriminals launch themed phishing and ticket fraud campaigns targeting global fans ahead of the tournament.

1,300+ C2 Servers Discovered Across the Middle East

Researchers uncover a large cluster of active command-and-control infrastructure supporting ongoing cyber operations.

Kali365 Kit Enables Microsoft 365 MFA Bypass

Advanced phishing kit circumvents MFA protections, allowing attackers to hijack enterprise accounts at scale.

Malicious Sicoob NuGet and npm Packages Target Financial and Cloud Secrets

Supply chain attack steals Brazilian banking credentials and CI/CD secrets through widely downloaded packages.

GREYVIBE Cyber Espionage Campaign Targets Ukraine

Emerging threat actor uses phishing and AI-assisted malware to infiltrate government, military, and civilian sectors.

Kimsuky Expands Arsenal with HTTPSpy and VS Code Tunneling

North Korean group targets South Korea using fake apps and meetings, adding stealthier persistence techniques.