Cybersecurity News, Threats & Vulnerability Alerts
APT28 Deploys Custom Covenant Framework for Espionage
Russian APT28 hackers modified the open-source Covenant tool for persistent espionage campaigns targeting government and defense sectors.
Teams Phishing Campaign Deploys A0Backdoor Malware
Hackers targeted financial and healthcare employees via Microsoft Teams to deploy A0Backdoor malware through Quick Assist remote access.
Cloud Attacks Exploit Fresh Bugs Within Days
Hackers now exploit newly disclosed third-party vulnerabilities to breach cloud environments within days instead of weeks.
Russian hackers target Signal, WhatsApp in govt phishing
Dutch intelligence warns Russian state hackers are targeting government officials through Signal and WhatsApp phishing attacks to steal sensitive communications.
ClickFix Malware Campaign Targets AI Coding Assistants
Cybercriminals launched a malvertising campaign using ClickFix techniques to exploit AI coding assistant users through fake command-line interfaces.
Ericsson US Hit by Data Breach Through Service Provider
Ericsson's U.S. subsidiary disclosed a data breach on March 9, 2026, after attackers compromised a third-party service provider and stole employee and customer data.
Malicious npm Package Mimics OpenClaw AI to Deploy RAT
Cybersecurity researchers found a fake OpenClaw AI npm package that installs remote access trojans and steals data from infected systems.
Salesforce warns of Experience Cloud data exposure attacks
Salesforce alerts customers about hackers exploiting misconfigured Experience Cloud platforms while ShinyHunters claims active data theft.
FBI Warns of Phishing Attacks Targeting Permit Applicants
FBI alerts businesses and individuals that criminals impersonate city officials in phishing campaigns targeting permit applications.
Chrome Extensions Turn Malicious After Ownership Transfer
Two Google Chrome extensions became malicious following ownership transfers, enabling attackers to inject code and steal user data.
Claude Opus 4.6 discovers 22 vulnerabilities in Firefox 148
Anthropic's Claude Opus 4.6 AI identified 22 security vulnerabilities in Firefox 148, all now fixed by Mozilla.
Chinese APT Targets Asian Organizations in Multi-Year Campaign
Palo Alto Networks Unit 42 discovered a previously unknown Chinese threat group conducting multi-year espionage operations across Asia's critical sectors.
Hackers Exploit .arpa DNS to Bypass Email Security
Threat actors abuse special-use .arpa domains and IPv6 reverse DNS to evade phishing detection systems and email gateways.
Cognizant TriZetto breach exposes 3.4M patient records
Healthcare IT provider TriZetto Provider Solutions disclosed a data breach affecting 3.4 million patients' sensitive medical information on March 6.
North Korean IT Workers Use AI to Enhance Remote Job Scams
North Korean operatives leverage AI face-swapping and automated tools to infiltrate Western companies through sophisticated remote work fraud schemes.
China APT Targets South American Telecom Infrastructure
China-linked UAT-9244 threat group compromises telecommunications networks across South America using three custom implants since 2024.
ClickFix Campaign Exploits Windows Terminal for Lumma Stealer
Microsoft reveals new ClickFix social engineering attack using Windows Terminal to deploy Lumma Stealer malware in February 2026.
CISA Adds Hikvision, Rockwell Flaws to KEV Catalog
CISA added two actively exploited vulnerabilities affecting Hikvision and Rockwell Automation products to its Known Exploited Vulnerabilities catalog on March 6.
Wikipedia Hit by Self-Propagating JavaScript Worm
Wikimedia Foundation confirms JavaScript worm vandalized pages and modified user scripts across multiple wikis on March 5.
WordPress Plugin Bug Lets Hackers Create Admin Accounts
Critical flaw in User Registration plugin affects 60,000+ WordPress sites, enabling unauthorized admin account creation.
APT41-Linked Silver Dragon Hits EU and Asian Governments
New APT41-affiliated threat group Silver Dragon targets government networks across Europe and Southeast Asia using phishing and legitimate services.