Web3 Job Scam Uses Fake Camera Failure to Deliver Infostealer Malware
A newly uncovered Web3-focused job scam is leveraging fake application workflows to deliver cross-platform infostealer malware, targeting both macOS and Windows users with tailored...
Dysphoria’s Hybrid Blockchain and Relay Architecture Makes Botnet Takedowns Harder
Since Q1 2026, researchers at XLab have been tracking an aggressively evolving IoT botnet family dubbed “Dysphoria,” whose bot population is estimated at over...
Hackers Use Fake Claude Desktop and Bing Ads to Deliver SectopRAT to 29 Organizations
Affected endpoints showed unusual Defender exclusions, new persistence mechanisms, and outbound connections aligned with remote access and credential theft activity, leading analysts to treat...
GitHub Actions Abuse Exploits cPanel CVE-2026-41940 to Steal Server Credentials
GitHub Actions abuse is powering a large-scale attack campaign that exploits the cPanel CVE-2026-41940 authentication bypass to steal server credentials and other sensitive secrets...
Hackers Abuse Microsoft Device Code Flow to Bypass MFA and Hijack Microsoft 365 Accounts
Hackers are increasingly abusing Microsoft’s legitimate device code flow to bypass multi-factor authentication (MFA) and hijack Microsoft 365 accounts, turning trusted identity controls into...