China-Linked Actor Taps Linux Backdoor in Forceful Espionage Campaign

"SprySOCKS" melds features from multiple previously known badware and adds to the threat actor's growing malware arsenal, Trend Micro says.

https://www.darkreading.com/attacks-brea...e-campaign

GitLab urges users to install security updates for critical pipeline flaw


GitLab has released security updates to address a critical severity vulnerability that allows attackers to run pipelines as other users via scheduled security scan policies. [...]


https://www.bleepingcomputer.com/news/se...line-flaw/

Hackers breached International Criminal Court’s systems last week


The International Criminal Court (ICC) disclosed a cyberattack on Tuesday after discovering last week that its systems had been breached. [...]


https://www.bleepingcomputer.com/news/se...last-week/

Trend Micro fixes endpoint protection zero-day used in attacks


Trend Micro fixed a remote code execution zero-day vulnerability in the Trend Micro's Apex One endpoint protection solution that was actively exploited in attacks. [...]


https://www.bleepingcomputer.com/news/se...n-attacks/

Claimants in Celsius crypto bankruptcy targeted in phishing attack

Scammers are impersonating the bankruptcy claim agent for crypto lender Celsius in phishing attacks that attempt to steal funds from cryptocurrency wallets. [...]


https://www.bleepingcomputer.com/news/se...ng-attack/

Google Authenticator Flaw Inadvertently Facilitated $15 Million Theft

Recently, a cryptocurrency firm, Fortress Trust, disclosed a theft of $15 million following a cyber…

Google Authenticator Flaw Inadvertently Facilitated $15 Million Theft on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Hackers Target Azerbaijan Users With A Novel Rust Malware

Researchers have caught a new malware campaign in the wild that deploys a novel Rust-based…

Hackers Target Azerbaijan Users With A Novel Rust Malware on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

APT36 state hackers infect Android devices using YouTube app clones


The APT36 hacking group, aka 'Transparent Tribe,' has been observed using at least three Android apps that mimic YouTube to infect devices with their signature remote access trojan (RAT), 'CapraRAT.' [...]


https://www.bleepingcomputer.com/news/se...pp-clones/

Hackers backdoor telecom providers with new HTTPSnoop malware


New malware named HTTPSnoop and PipeSnoop are used in cyberattacks on telecommunication service providers in the Middle East, allowing threat actors to remotely execute commands on infected devices. [...]


https://www.bleepingcomputer.com/news/se...p-malware/

Microsoft to start retiring Exchange Web Services in October 2026


Microsoft said today that the Exchange Web Services (EWS) API for Exchange Online and Office 365 will be retired in approximately three years. [...]


https://www.bleepingcomputer.com/news/mi...ober-2026/