PowMix targets Czech workforce since Dec 2025 using jittered C2 and ZIP phishing, enabling stealthy remote access and ...
CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.
PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...
Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote ...
Attackers are exploiting trust in Adobe’s brand to deliver covert remote access, using a fake Acrobat Reader download page to install ConnectWise ScreenConnect through a fileless, memory-heavy attack ...
Cyber attackers are abusing the low-code automation platform n8n to push malware and track targets through phishing emails, in a campaign that security researchers say gathered pace between October ...
Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...