The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.

The post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.

The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surveillance.

The post North Korean Hackers Deploy New Linux Espionage Toolkit appeared first on SecurityWeek.

The attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients.

The post Modified ScreenConnect Clients Used in Worm-Like Campaign appeared first on SecurityWeek.

Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates.

The post Malicious Virtualizor Update Served via BGP Hijacking appeared first on SecurityWeek.

The shutdown operation involved peer list manipulation and Sality payload URL takedown.

The post 23-Year-Old Sality P2P Botnet Disrupted appeared first on SecurityWeek.

The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.

The post Five Venezuelans Plead Guilty in US Court to ATM Jackpotting appeared first on SecurityWeek.

The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage.

The post Anthropic Warns Claude Users of Infostealer Malware Infections appeared first on SecurityWeek.

Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples and found only 12 reached production endpoints.

The post AI Speeds Up Malware Development, Not Its Success Rate: Analysis appeared first on SecurityWeek.

Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices.

The post First Malware Built Specifically for Car Head Units Fuels Botnet appeared first on SecurityWeek.

The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware.

The post Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight appeared first on SecurityWeek.

Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.

The post Rust Supply Chain Attack Linked to North Korean Hackers appeared first on SecurityWeek.

The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.

The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared first on SecurityWeek.

Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.

The post Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset appeared first on SecurityWeek.