Citrix NetScaler Zero-Days Under Active Attack: Google Uncovers Hidden Web Shell Campaign
Google's threat intelligence team says attackers have been exploiting two critical, now-patched Citrix NetScaler zero-days since early September to plant a stealthy PHP web shell and pivot deep...
Fake Zoom and PDF Installers Deploy Dual Remote-Control Tools on Business PCs
A phishing campaign disguises legitimate MSP360 remote-management software as Zoom installers, PDF readers and business documents. Once installed, it adds ScreenConnect as a second access channel and delivers...
PaperPhone Bot Network Masks Automated Scraping Behind 75,000 IP Addresses
Researchers identified a coordinated headless-browser network using 75,000 IP addresses and fabricated mobile identities to disguise large-scale scraping. Contradictory browser fingerprints and synchronized traffic exposed the supposedly diverse...
Trojanized 7-Zip Installers Hide Downloaders Inside Extraction Code
Researchers found malware loaders concealed inside modified 7-Zip self-extracting code, while a genuine application installer provided a convincing decoy. The technique can defeat reviews that inspect only extracted...
North Korea-Linked Malware Uses Ethereum Transfers to Rotate Command Servers
A North Korea-linked campaign is encoding command-server locations in Ethereum recipient addresses, giving cross-platform malware a resilient recovery channel. The operation targets developers with fake recruitment tasks and...
Octopus Server Deserialization Bug Opens Deployment Systems to Code Execution
A high-severity Octopus Server vulnerability lets sufficiently privileged authenticated users execute code through malicious JSON. There is no workaround, making upgrades urgent for self-hosted deployment environments that hold...
OpenSSL DTLS Flaw Can Expose Heap Memory and Crash Network Services
OpenSSL has patched a high-severity DTLS flaw that can disclose adjacent heap data in plaintext or crash an affected process. Organizations should locate both system and bundled OpenSSL...
Knockoff ‘Jev AI’ Storefronts Are Charging Up to 11x Markup — And Quietly Routing Your Prompts Through Someone Else’s Servers
Within days of the Jev AI model's public launch, scammers registered lookalike storefronts that resell legitimate API access at inflated prices while funneling every prompt through third-party infrastructure...