GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs
iT4iNT SERVER Cybersecurity researchers have flagged yet another evolution of the ongoing GlassWorm campaign, which employs a new Zig dropper that…
Showing posts from April, 2026Show all
UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns
iT4iNT SERVER A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-gover…
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories
iT4iNT SERVER Thursday. Another week, another batch of things that probably should've been caught sooner but weren't. This one's got som…
The Hidden Security Risks of Shadow AI in Enterprises
iT4iNT SERVER As AI tools become more accessible, employees are adopting them without formal approval from IT and security teams. While these tools m…
Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)
iT4iNT SERVER The Fragmented State of Modern Enterprise Identity Enterprise IAM is approaching a breaking point. As organizations scale, identity be…
Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
iT4iNT SERVER Artificial Intelligence (AI) company Anthropic announced a new cybersecurity initiative called Project Glasswing that will use a previe…
Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs
iT4iNT SERVER Iran-affiliated cyber actors are targeting internet-facing operational technology (OT) devices across critical infrastructures in the U…
New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips
iT4iNT SERVER New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be…
China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware
iT4iNT SERVER A China-based threat actor known for deploying Medusa ransomware has been linked to the weaponization of a combination of zero-day and …
Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools
iT4iNT SERVER Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver (BY…
BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks
iT4iNT SERVER Germany's Federal Criminal Police Office (aka BKA or the Bundeskriminalamt) has unmasked the real identity of the main threat actor…
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
iT4iNT SERVER Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come w…
UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack
iT4iNT SERVER The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engin…
Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise
iT4iNT SERVER Cisco has released updates to address a critical security flaw in the Integrated Management Controller (IMC) that, if successfully expl…
Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners
iT4iNT SERVER A financially motivated operation codenamed REF1695 has been observed leveraging fake installers to deploy remote access trojans (RATs)…
Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit
iT4iNT SERVER Apple on Wednesday expanded the availability of iOS 18.7.7 and iPadOS 18.7.7 to a broader range of devices to protect users from the ri…
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
iT4iNT SERVER The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new phishing campaign in which the cybersecurity a…
Block the Prompt, Not the Work: The End of "Doctor No"
iT4iNT SERVER There is a character that keeps appearing in enterprise security departments, and most CISOs know exactly who that is. It doesn’t build…
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069
iT4iNT SERVER Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean thr…
