Exclusive articles:
PoeLLM Malware Targets Exposed AI Servers and Uses GitHub Poem to Hide C2
Black Lotus Labs has uncovered PoeLLM, a malware campaign targeting exposed artificial intelligence services and other internet-facing applications.
Active since at least April 2026,...
MALFEX npm Campaign Uses 8 Malicious Packages to Deploy RATs and Credential Stealers
Security researchers have detailed MALFEX, an npm supply-chain campaign that uses eight malicious packages to deliver remote access malware and credential stealers to Windows...
CyberXero Uses 51 AI Agents to Target Ukrainian Critical Infrastructure and Mass-Exploit WordPress
CyberXero, a Russian-speaking initial access broker, has combined common hacking tools with an AI orchestration system to target Ukrainian critical infrastructure and websites worldwide....
Cyberattack on South Korean Churches Exposes Data of More Than 1 Million Congregants
Two of South Korea’s largest churches suffered cyberattacks that exposed approximately 1.05 million congregant records, according to an analysis.
The intrusions involved stolen credentials,...
UAC-0277 Hackers Compromise 100+ Websites to Spread LUNEXSTEALER via ClickFix Attacks
Ukraine’s Computer Emergency Response Team, discovered more than 100 compromised websites in September 2026 distributing LUNEXSTEALER through fake Cloudflare verification pages.
The agency tracks...
