Monitor malware campaigns, backdoors, stealers, botnets, trojans, and defender-focused technical reporting. Validate indicators against current primary research before operational use.
Latest intelligence
October 23, 2026
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: Affected users or organisationsIncident: The Russian state-sponsored hacking group Sandworm teamed…
October 22, 2026
UpdraftPlus WordPress Plugin Security Breach Enables Backdoor Attacks
Threat Intelligence Brief Curated summary with source attribution Source: searchenginejournal.com Threat Risk: HighVictim: UpdraftPlus users and WordPress site administratorsIncident: Breach of TeamUpdraft’s database leading…
October 21, 2026
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Users of LiteLLM version 1.107.0Incident: Supply chain compromise of the LiteLLM…
October 21, 2026
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Organizations in Asia and AfricaIncident: The deployment of the MoonWalk backdoor…
October 21, 2026
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: Organisations using the affected technologyIncident: Unknown threat actors breached TeamUpdraft’s website…
October 21, 2026
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: Russian Healthcare OrganizationIncident: A two-year network intrusion utilizing a backdoor hidden…
October 21, 2026
Man seeking love travels 2,000 km to meet an AI-generated woman | Malwarebytes
Threat Intelligence Brief Curated summary with source attribution Source: malwarebytes.com Threat Risk: LowVictim: Individual social media usersIncident: A man was manipulated by an AI-generated…
October 20, 2026
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: OVHcloud CLI usersIncident: Hijacking of GitHub release archives to distribute secret-stealing…
October 20, 2026
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Organizations using Siemens Software CenterIncident: Exploitation of a DLL sideloading vulnerability…
October 20, 2026
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: General corporate and home usersIncident: Deployment of the ROMULUS ClickFix delivery…
October 19, 2026
A week in security (October 12 – October 18) | Malwarebytes
Threat Intelligence Brief Curated summary with source attribution Source: malwarebytes.com Threat Risk: MediumVictim: Affected users or organisationsIncident: Last week on Malwarebytes Labs: – Eiliko…
October 19, 2026
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Plex Media Server usersIncident: Active exploitation of the Plex2Shell vulnerability chain…
October 19, 2026
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: Affected users or organisationsIncident: The threat actor behind the GhostAction supply…
October 16, 2026
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Telecommunications Managed Service ProviderIncident: Exploitation of Fortinet vulnerabilities to deploy stealthy…
October 15, 2026
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: Organisations using the affected technologyIncident: Someone built a tool to steal…
October 7, 2026
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: Affected users or organisationsIncident: The Computer Emergency Response Team of Ukraine…
October 1, 2026
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: WordPress site administratorsIncident: Deployment of a self-healing, blockchain-controlled backdoor codenamed SC.Impact:…
September 29, 2026
Russia’s Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Government-linked organizations and think tanksIncident: A state-sponsored phishing campaign delivering backdoors…
September 23, 2026
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Software developers and CI/CD environmentsIncident: Supply chain compromise of MemTensor libraries…
September 23, 2026
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Asian government entities and NGOsIncident: Exploitation of a zero-day vulnerability chain…
September 22, 2026
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: MediumVictim: Meta Muse users on macOSIncident: A proof-of-concept vulnerability allows local malware…
September 21, 2026
Iran-linked Handala Hack group utilizes HEAVYGRAM and CRUDEEXCLUDE malware | brief | SC Media
Threat Intelligence Brief Curated summary with source attribution Source: scworld.com Threat Risk: HighVictim: Dissidents and opposition groupsIncident: Deployment of HEAVYGRAM and CRUDEEXCLUDE malware for…
September 21, 2026
AI Security Incident Case: Trusted AI Platforms Become a New Channel for Malware Distribution – Security Boulevard
Threat Intelligence Brief Curated summary with source attribution Source: securityboulevard.com Threat Risk: HighVictim: Corporate employees and macOS usersIncident: Malware distribution via abused AI sharing…
September 21, 2026
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
Threat Intelligence Brief Curated summary with source attribution Source: thehackernews.com Threat Risk: HighVictim: Corporate environmentsIncident: Deployment of the TASK#STOMP PowerShell backdoor for data theft…