Researchers Link DigiCert Security Incident To GoldenEyeDog Subgroup
Security researchers have linked the April 2026 DigiCert security incident to a GoldenEyeDog subgroup that allegedly stole code signing certificates and used them to sign malware.
GoSerpent Malware Targets Southeast Asian Government And Diplomatic Organizations For Cyber Espionage
Kaspersky has uncovered the GoSerpent malware campaign targeting government and diplomatic organizations in Southeast Asia with advanced espionage, credential theft, and data exfiltration capabilities.
Microsoft Warns Of ACR Stealer Campaign Using ClickFix Lures To Steal Browser Tokens And Microsoft 365 Files
Microsoft has warned of active ACR Stealer campaigns using ClickFix lures to steal browser credentials, authentication tokens, Microsoft 365 files, and sensitive enterprise data through fileless and disk based attack chains.
RedHook Android Malware Uses Wireless ADB to Steal Banking Information Without Root Access
Researchers warn that the latest RedHook Android malware abuses Wireless ADB and Accessibility permissions to gain deep device access and steal banking credentials without requiring root access.
CrashStealer macOS Malware Uses Apple Notarized Dropper to Bypass Gatekeeper and Steal Sensitive Data
Researchers have identified CrashStealer, a new macOS information stealing malware that uses an Apple notarized dropper to bypass Gatekeeper while targeting browser data, cryptocurrency wallets, password managers, and keychain credentials.
National CERT Pakistan Warns Organizations to Patch Critical FortiSandbox Vulnerabilities Under Active Exploitation
National CERT Pakistan has issued an advisory warning organizations to immediately patch critical FortiSandbox vulnerabilities that are being actively targeted through internet facing systems.
Silver Fox Deploys New MODBEACON RAT Using gRPC Streaming For Encrypted Command And Control Traffic
Researchers have linked the Silver Fox cybercrime group to a new Rust based remote access trojan called MODBEACON that uses gRPC streaming and encrypted command and control channels to target organizations across Asia.
Iran Linked Hackers Deploy Cavern C2 Framework To Target Regional Government And IT Organizations
Researchers have identified a new modular Cavern command and control framework used by an Iran linked hacking group to target government and IT organizations through supply chain attacks, advanced malware, and post exploitation techniques.
Armored Likho Targets Government Agencies And Energy Sector With BusySnake Stealer Campaign
A threat actor known as Armored Likho has been linked to cyber espionage campaigns targeting government and power sectors using BusySnake Stealer, RAT tools, and phishing-based attack chains.
Attackers Exploit SimpleHelp Vulnerability To Deploy TaskWeaver And Djinn Stealer Malware
Threat actors are actively exploiting SimpleHelp vulnerability CVE 2026 48558 to deploy TaskWeaver and Djinn Stealer, targeting cloud credentials, AI tools, cryptocurrency wallets, and enterprise infrastructure.
