Security Threats

Threats Incidents Live News

Start with an app, service or company you use. Unsure what runs your website or work device? Ask your host or IT team for the product name and version. Search covers threats, incidents and news.

September 11, 2026 13 threats

Gray Rabbits and the Tale of a One-Click Backdoor

Artifactory flaws chained in attacks deploying backdoor malware

Microsoft Defender ShieldBreak bypass still lets attackers read files

Russian attackers rebuild malware with AI tool Claude

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

Beware of the LegionLoader malware being distributed via the ClickFix method

From Fake DocuSign to ScreenConnect: Attack Blocked

Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign

New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks

Hackers Weaponize AI Safety Guardrails to Hide Malware From LLM-Powered Security Scanners

ClearFake malware infects systems via WebDAV

Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion

Sogou Input Method backdoor attack by China-linked attackers

September 10, 2026 10 threats

Melofee: a look back at a Linux implant and its new variants

Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers

SloppyRAT: A New Tool For Ransomware Attacks

Hackers Are Hijacking Claude Accounts and Burning Through Paid Usage

ShieldCrash PoC: Microsoft Defender Fix Bypass

Redtail Payload Analysis [Guest Diary], (Wed, Sep 9th)

Gigabud banking malware hides in Android work profiles

Active Directory attackers steal password hashes

Malicious Chrome and Firefox Extensions Steal Crypto Traders' Session and Wallet Data

Hackers Use ClickFix Lures to Deploy MacSync Stealer and Bypass macOS Security.

September 9, 2026 20 threats

Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration

Vwork: Weaponized Open-source Software as an Addon for Gigabud

Grand Theft Auto VI hype leads to malware

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence

Passkey-themed social engineering leads to identity and cloud compromise

Shai-Hulud npm worm resurfaces, bypassing security scans

Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Google Finds Chinese Attackers Running AI on Compromised Networks

F5 BIG-IP malware hides web shells in memory to evade detection

Gigabud Uses Android App Cloning to Evade Fraud Detection

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Hackers Abuse Google CAPTCHA, WebDAV and BNB Smart Chain to Deploy Credential-Stealing Malware

Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

GoldFactory Weaponizes Open-Source Vwork App Cloner in Gigabud Banking Malware Attacks

Hackers Exploit Critical FortiGate Flaw to Deploy AI-Assisted PivotC2 RAT

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Fake macOS installers spread OtterCookie spyware

Peeling Back the Layers: Inside Vidar - From Virtualized Code to Stolen Credentials

Infostealers Target Claude, Cursor, Codex and Other AI Agents to Steal Credentials and Sensitive Data

Redis Cryptomining Botnet Hijacks 3,562 Servers for Monero

September 8, 2026 15 threats

MacSync: The Evasive macOS Stealer Exploiting ClickFix Lures

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Inside a Packed Android RAT Loader

Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files

PEEP Turns Chrome, Edge Into Post-Compromise Backdoors

New Android RAT uses worm to target exposed ADB services

THost9 Android malware spreads via ADB

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Linked to Critical Infrastructure Attacks

North Korea-linked Hackers Hide a Backdoor Inside HAProxy

Gambling Goblin hijacks Brazilian government sites

Pegasus Spyware Hits Serbian Student Activist via Zero-Click iMessage

Node.js Malware Attacks Target Tech and Finance Sectors

Python NodeStealer malware adds keylogging and screenshots

September 7, 2026 20 threats

Attackers Exploit Unpatched Magento Zero-Day to Backdoor Online Stores

Adobe Commerce and Magento stores hacked by StyleSmuggler backdoor

CrowdStrike Investigates FalconFlank Zero-Day as PoC Reaches SYSTEM

Chaotic Eclipse Released A PoC For NVIDIA GreenSection Memory Corruption Zero-Day

Kimsuky Uses the AI Agent 'opencode' to Create Decoys as Its GitHub PAT-Based LNK Attacks Evolve

PEEP: A Browser RAT Posing as a Chrome Extension

Tracking BigBear 2.0 Evilginx2 Phishing Campaign

StyleSmuggler (2)

StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attack

StyleSmuggler: The Magento Zero-Day Behind New Store Attacks

Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy

PoisonedRefresh reported on F5 BIG-IP APM

Espionage Toolkit Concealed in HAProxy

Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

Malicious Packagist themes deliver iPhone spyware

Tengu Linux malware hides as system processes and floods targets

JSCeal malware can reuse stolen Google login cookies

Fake coding tests target aviation and fintech specialists

Attackers replaced HAProxy with a traffic-spying backdoor

Fake Minecraft mod can steal passwords and control PCs

PEEP extension steals browser sessions and controls Windows PCs

September 6, 2026 1 threat

BengalSEO Part 1: Anatomy of the Operation

September 5, 2026 1 threat

StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attack

Load more threats

CISA KEV170923m ago

VulnCheck KEV20023m ago

NVD150823m ago

WPScan0never

HIBP8023m ago

URLhaus6023m ago

GitHub Advisory12023m ago

OSV.dev323m ago

ransomware.live8023m ago

Microsoft MSRC20023m ago

CISA Advisory3023m ago

Exploit-DB4023m ago

BleepingComputer1123m ago

KrebsOnSecurity123m ago

TheHackerNews2423m ago

SecurityWeek523m ago

SecurityAffairs723m ago

VPNCentral023m ago

SC World123m ago

eSecurityPlanet923m ago

DarkReading1323m ago

SchneierOnSecurity123m ago

ThreatFox8023m ago

MalwareBazaar1023m ago

Chrome Releases423m ago

Apple Security023m ago

Mozilla MFSA3023m ago

Adobe PSIRT3023m ago

AlienVault OTX3223m ago

Pulsedive123m ago

SANS ISC323m ago

Cisco Talos423m ago

Unit 42323m ago

Mandiant02mo ago

Microsoft Threat Intelligence523m ago

Patchstack1523m ago

Rapid7623m ago

CERT/CC1023m ago

Openwall oss-security8023m ago

Wordfence723m ago

Socket1023m ago

SafeDep523m ago

Sonatype323m ago

Snyk023m ago

StepSecurity123m ago

Oracle Security Alerts723m ago

GitLab Security Releases623m ago

Palo Alto PSIRT1123m ago

Veeam Security Advisories623m ago

Plesk Support1123m ago

ConnectWise Security Bulletins423m ago

Cisco PSIRT923m ago

CERT-FR Advisories3923m ago

CERT-FR Alerts223m ago

CERT-EU Advisories223m ago

CERT-Bund Advisories5023m ago

INCIBE Advisories1023m ago

ACN CSIRT Italy4623m ago

Jenkins Advisories123m ago

Drupal Advisories323m ago

FreeBSD Advisories1023m ago

Gentoo Advisories3423m ago

QNAP Advisories023m ago

Synology Advisories023m ago

Huawei PSIRT CN023m ago

Debian DSA3023m ago

JPCERT/CC623m ago

JVN EN2023m ago

Splunk1723m ago

Node.js223m ago

HashiCorp2323m ago

Joomla2523m ago

Elastic Security2523m ago

JetBrains123m ago

CISA ICS Advisories3023m ago

CISA Medical Advisories223m ago

MS-ISAC923m ago

CCCS Canada5023m ago

CERT-SE223m ago

NCSC UK023m ago

CISA News023m ago

Proofpoint023m ago

Datadog Security Labs023m ago

Recorded Future223m ago

Cyble323m ago

Varonis023m ago

Sygnia123m ago

Vectra AI023m ago

JPCERT Blog023m ago

SOCRadar523m ago

Graham Cluley323m ago

SecurityOnline1323m ago

GBHackers823m ago

Cyber Security News823m ago

Infosecurity Magazine3023m ago

The Cyber Express623m ago

NNS Blog323m ago

elttam123m ago

Intruder Research123m ago

SpaceRaccoon023m ago

Exodus Intelligence423m ago

VoidSec123m ago

Chocapikk423m ago

Exploit Reversing223m ago

Tim Blazytko123m ago

Zellic123m ago

EUVD023m ago

Ubuntu USN4023m ago

Red Hat5023m ago

Zero Day Initiative4023m ago

Fortinet PSIRT723m ago

NeuraCybIntel723m ago