This dangerous new Android malware disguises itself as a VPN or IPTV app - so be on your guard

Klopatra, an Android malware apparently built by a Turkish threat actor, does not resemble anything that’s already out there, ...
Homeland Security Today

CISA Releases Malware Analysis Report Associated with Microsoft SharePoint Vulnerabilities

CISA has published a Malware Analysis Report (MAR) with analysis and associated detection signatures on files related to Microsoft SharePoint vulnerabilities, according to a press release yesterday.
NextBigFuture

Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data for Better Malware Detection

Criminal IP, a renowned Cyber Threat Intelligence (CTI) search engine developed by AI SPERA, has partnered with Hybrid Analysis, a platform that provides advanced malware analysis and threat ...

Nation-state hackers deliver malware from “bulletproof” blockchains

One of the groups Google observed, a North Korean-backed team tracked as UNC5342, uses earlier-stage malware tracked as ...
Morningstar

Booz Allen Automates Malware Analysis With Vellox Reverser

New agentic AI-powered product reverse-engineers malware in minutes instead of days or weeks Booz Allen Hamilton (NYSE: BAH) today announced Vellox Reverser™, an AI-enabled cloud product that protects ...
SDxCentral

Inside CoffeeLoader: The malware that hides in GPUs

When analysts at cybersecurity firm Zscaler were combing through their latest findings, they didn’t expect to uncover an entirely new malware strain, let alone one that executes GPU code. Dubbed ...
The Hacker News

XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities

XWorm V6.0 is designed to connect to its C2 server at 94.159.113 [.]64 on port 4411 and supports a command called "plugin" to ...
GCN

CISA outlines malware tied to Ivanti flaws and publishes detection guidance

The Cybersecurity and Infrastructure Security Agency published detailed recommendations on two malware versions that targeted the Ivanti Endpoint Manager Mobile. The detailed report can offer ...
Infosecurity-magazine.com

ArcaneDoor Threat Actor Resurfaces in Continued Attacks Against Cisco Firewalls

A newly identified cyber-attack campaign has exploited Cisco Adaptive Security Appliance (ASA) devices in a sophisticated operation linked to the espionage-focused ArcaneDoor threat actor. The attacks ...