Month: September 2025
-
EvilAI as AI-enhanced Tools to Exfiltrate Sensitive Browser Data and Evade Detections
A sophisticated malware campaign has emerged that leverages artificial intelligence to create deceptively legitimate applications, marking a significant evolution in…
-
Buterat Backdoor Attacking Enterprises to Establish Persistence and Control Endpoints
A sophisticated backdoor malware known as Backdoor.WIN32.Buterat has emerged as a significant threat to enterprise networks, demonstrating advanced [persistence](https://cybersecuritynews.com/detecting-and-responding-to-new-nation-state-persistence-techniques/) techniques…
-
New Malvertising Campaign Leverages GitHub Repository to Deliver Malware
A sophisticated malvertising campaign has emerged, exploiting GitHub repositories through dangling commits to distribute malware via fake GitHub Desktop clients.This…
-
New Malware Attack Leverages SVGs, Email Attachments to Deliver XWorm and Remcos RAT
Cybersecurity researchers have uncovered a sophisticated malware campaign that exploits SVG (Scalable Vector Graphics) files and email attachments to distribute…
-
What Are The Takeaways From The Scattered LAPSUS $Hunters Statement?
The well-known group of cybercriminals called Scattered Lapsus$ Hunters released a surprising farewell statement on BreachForums.This manifesto, a mix of…
-
DHS inspector general: CISA mismanaged multimillion-dollar employee incentives program
 [Suzanne Smalley](/author/suzanne-smalley)September 12th, 2025 DHS inspector general: CISA mismanaged multimillion-dollar employee incentives program======================================================================================The Cybersecurity and Infrastructure Security Agency (CISA)…
-
Philippine military company spied upon with new China-linked malware
Philippine Marines conduct a training exercise with U.S. forces in San Vicente, the Philippines, on August 24, 2025. Image:…
-
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass
HybridPetya, a new ransomware discovered on VirusTotal, combines features of Petya and NotPetya while adding UEFI system compatibility. It encrypts…
-
AIGenerated Code and Fake Apps Used for FarReaching Attacks
A new malware campaign called EvilAI is spreading globally by disguising itself as legitimate AI-enhanced productivity tools. The malware uses…
-
Inside the 2025 Energy Phishing Wave: Chevron, Conoco, PBF, Phillips 66
In 2025, a significant surge in phishing attacks targeting major U.S. energy companies was observed. The campaign primarily focused on…