tsecurity.de - ⚠️ Malware / Trojaner / Viren

PhantomEnigma Shifts Tactics: Explorer-Based Payload Delivery

Thu, 17 Sep 2026 07:45:12 +0200

submitted by /u/ANYRUN-team [link] [comments] Weiterlesen

Built a PPL-aware ALPC enumerator because standard handle duplication was leaving blind spots in the attack surface

Thu, 17 Sep 2026 07:15:08 +0200

Was doing some Windows ALPC/RPC vuln research and ran into a simple problem: the usual userland enumeration approach skips ports when handle duplication fails, which gets especially interesting with PPL processes. So I built this to dynamically resolve the ALPC object type index, fall back to NtQueryInformationProcess / PS_PROTECTION when... Weiterlesen

SindriKit V2.0.0 (C framework to decouple technique logic from execution mechanics)

Thu, 17 Sep 2026 07:15:08 +0200

Released V2 for my opensource maldev tool/framework. Feel free to check out the code and implementation. Would really appreciate feedback :) submitted by /u/Important_Map6928 [link] [comments] Weiterlesen

Looking for dedicated beginner ctf buddies

Thu, 17 Sep 2026 07:15:08 +0200

submitted by /u/Fit-Iron-5614 [link] [comments] Weiterlesen

0xCr0ssCrush - Windows BYOVD Ring 0 Exploit

Thu, 17 Sep 2026 07:15:08 +0200

submitted by /u/Anonymous_Wajeeh [link] [comments] Weiterlesen

Centralizing scanner findings across multiple tools. anyone actually happy with their setup?

Thu, 17 Sep 2026 07:15:08 +0200

So vuln team here, drowning in findings from like ten scanners and ticket queues all over the place, trying to centralize everything into one risk based view without breaking existing workflows. any hints? submitted by /u/NetLopsdedslsatn3708 [link] [comments] Weiterlesen

I Missed One TLB Shootdown and Somehow Ended Up Controlling a Page Table

Thu, 17 Sep 2026 07:15:08 +0200

submitted by /u/unknownhad [link] [comments] Weiterlesen

Warum sichere Datenspeicherung für den Mittelstand essenziell ist - it-daily.net

Thu, 17 Sep 2026 03:34:58 +0200

Exponentielles Datenwachstum, die Bedrohung durch zielgerichtete Ransomware-Angriffe und immer strengere Compliance-Vorgaben setzen IT-Abteilungen im ... Weiterlesen

How the mighty have fallen — the notorious Stuxnet malware source code has been replicated and posted on GitHub for all to see

Thu, 17 Sep 2026 01:37:12 +0200

A pseudonymous GitHub account has published what it calls a reconstruction of Stuxnet malware that purportedly took out a fifth of Iran's centrifuges before being discoveredThe original source has never surfaced, and the 'Stuxnet' moniker that the account uses comes from Symantec's coining of the name weeks after it was discoveredThe code remains... Weiterlesen

IT Security News Daily Summary 2026-09-16

Thu, 17 Sep 2026 00:11:39 +0200

200 posts published today 21:31Revolut gave customer IDs and financial data to a government impostor 21:31Architecting a secure landing zone in the AWS European Sovereign Cloud 21:31Prophet Security research finds AI is cutting SOC investigation times, but nearly half of in-house builds fail to stick 21:02LNK Metadata 21:02BambooToken: The Malware... Weiterlesen

Cybercrime finds its sea legs.

Wed, 16 Sep 2026 23:43:05 +0200

Officials investigate suspected cyberattacks on U.S.-bound oil tankers. Iranian operators deploy Chosen Brick surveillance malware. Ukraine cracks down on scam call centers. Researchers uncover two TP-Link camera zero-days. Maria Varmazis looks at weapons in space. CenterPoint Energy reports a data breach. Spain records its first breach caused by... Weiterlesen

BambooToken: The Malware That Speaks MQTT to Stay Under the Radar

Wed, 16 Sep 2026 23:40:37 +0200

Lumen exposes BambooToken, a stealthy malware family using MQTT and sideloading to quietly infect targets across Asia and beyond. BambooToken is a new malware family that uses MQTT, a lightweight messaging protocol commonly found in smart devices and industrial systems, to quietly control infected Windows and Linux machines. Most malware connects... Weiterlesen

Google removed today 15 malicious chrome extensions

Wed, 16 Sep 2026 23:39:19 +0200

I track Chrome Web Store removals and today's pass picked up 15 extensions pulled with a malware classification, not the usual policy or spam category. https://malext.io/?reason=Malware&day=2026-09-16 Important thing is that removal from the google store does not remove the extension from browsers that already have it. Unless Google pushes it... Weiterlesen

Iranian hackers use CHOSEN BRICK Windows malware to spy on targets

Wed, 16 Sep 2026 23:39:18 +0200

Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide. [...] Weiterlesen

Malware bypasses browser checks to force install Chrome, Edge extensions

Wed, 16 Sep 2026 21:10:23 +0200

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data. [...] Weiterlesen

Drei Threat-Gruppen treffen russische Unternehmen: Backdoors, Ransomware & Wiper

Wed, 16 Sep 2026 20:47:08 +0200

LONDON (IT BOLTWISE) – Drei getrennt verfolgte Bedrohungscluster zielen laut einem Bericht auf russische Unternehmensumgebungen. NightEagle nutzt kompromittierte VPN-Zugänge und verschaltet sich anschließend in Microsoft Exchange und Active Directory. Hacking Cat wechselt von reinen Angriffen auf Verschlüsselung und zerstörerische Payloads,... Weiterlesen

Iran snoops on enemies of the state with Chosen Brick malware controlled using messaging apps

Wed, 16 Sep 2026 20:42:15 +0200

UK NCSC, FBI, and Dutch AIVD warn Iran is using Chosen Brick malware against dissidents and journalistsMalware steals files, captures audio, grabs WhatsApp/Telegram data, and can wipe systems entirelyOperatives rely on social engineering; agencies urge awareness, MFA, updates, and endpoint monitoringIranian hackers are targeting “enemies of the... Weiterlesen

Mehr als nur Antivirus: So hilft Norton gegen Phishing, Betrugsmaschen und gefährliche Downloads

Wed, 16 Sep 2026 20:41:06 +0200

Norton ist aktuell nur halb so teuer und schützt euch vor mehr als nur Viren. Für 1,67 Euro pro Monat bekommt ihr auch Schutz vor Phishing, Betrug und Ransomware. Dieser Artikel wurde einsortiert unter Internet & Netzwelt, Schnäppchen, In eigener Sache, Antivirussoftware: Optimaler Virenschutz für PC, Smartphone und Tablet, Sponsored Post -... Weiterlesen

[iOS] Analyzing anomalous cpu_resource / diskwrites_resource reports on a stock TikTok process: unnamed UUID-only binaries in Binary Images

Wed, 16 Sep 2026 20:30:32 +0200

Context: iPhone 15 Pro Max, current iOS, no jailbreak, no sideloading, no configuration profiles, app reinstalled cleanly. All observations reproducible across WiFi / 4G / 5G. I've been analyzing iOS analytics ( .ips ) incident reports on a specific app process and found a pattern I'd like to compare against what this community typically sees in... Weiterlesen

Hackers Can Rent VectraRAT for $250 a Month to Take Control of Windows PCs

Wed, 16 Sep 2026 18:46:47 +0200

Hackers can now rent a Windows-focused remote access tool called VectraRAT for $250 a month, lowering the barrier to deep and persistent compromise. The malware gives paying operators a way to watch victims, steal data, run commands, and move traffic through an infected computer. VectraRAT has surfaced as a rental-only malware service rather than... Weiterlesen

Hackers Use Cross-Platform Noodle RAT to Secretly Control Windows and Linux Systems

Wed, 16 Sep 2026 18:46:15 +0200

Noodle RAT is a remote-access trojan that gives attackers control of compromised computers and servers. Its renewed visibility matters because it runs on both Windows and Linux, allowing one malware family to follow victims across corporate networks. The tool has appeared in operations against organisations across Asia-Pacific, including Thailand,... Weiterlesen

The true cost of a ransomware attack, with and without BCDR

Wed, 16 Sep 2026 18:42:14 +0200

The ransom itself can be only a fraction of the total cost of a ransomware attack, with downtime, recovery, remediation, and legal obligations adding millions to the bill. Datto explains how a mature BCDR strategy can reduce downtime and provide a faster, more predictable path to recovery. [...] Weiterlesen

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Wed, 16 Sep 2026 18:41:26 +0200

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new... Weiterlesen

Serbien: Oppositionelle stehen im Visier von Überwachungssoftware

Wed, 16 Sep 2026 18:39:27 +0200

IT-Forensik-Fachleute haben in mehreren Fällen den gezielten Einsatz von Spyware gegen Bürger:innen in Serbien festgestellt. Das ist nicht das erste Mal, dass Regierungskritiker:innen und Oppositionelle des Balkanstaats ins Visier geraten. Kurz vor den Neuwahlen wurden Infektionen mit Trojanern bekannt. – Alle Rechte vorbehalten: Trojanisches... Weiterlesen

Trellix Stinger Download - Spezielle Viren entfernen

Wed, 16 Sep 2026 18:37:30 +0200

Der Download von Trellix Stinger durchsucht Ihren PC nach Viren, Würmern sowie anderen Formen von Malware und entfernt diese vollständig und sicher. Trellix Stinger ist dabei als Ergänzung vorhandener ... (Weiter lesen) Weiterlesen

Streaminghub offline: Eigenwerbung führt BREIN zum Betreiber

Wed, 16 Sep 2026 18:30:20 +0200

Streaminghub offline: BREIN identifiziert Betreiber über dessen Eigenwerbung. Das illegale Angebot umfasste Filme, Serien, Live-TV und Sport Der Artikel Streaminghub offline: Eigenwerbung führt BREIN zum Betreiber erschien zuerst auf TARNKAPPE.INFO Weiterlesen

Irdeto-Tochter Denuvo reicht Klage gegen voices38 ein

Wed, 16 Sep 2026 18:30:20 +0200

Die Irdeto-Tochter Denuvo reichte vor einem US-Bundesgericht Klage gegen den Cracker voices38 ein, der darauf aber sehr entspannt reagiert. Der Artikel Irdeto-Tochter Denuvo reicht Klage gegen voices38 ein erschien zuerst auf TARNKAPPE.INFO Weiterlesen

HBO Max Reddit Account Hacked: 108 Malicious Ads Push ClickFix Malware

Wed, 16 Sep 2026 15:43:28 +0200

A verified HBO Max account looked like a safe place to encounter an ad. Attackers reportedly turned that credibility into a malware delivery system. Researchers at Hudson Rock found that attackers compromised HBO Max’s verified Reddit advertising account and used it to run 108 malicious ads over roughly 48 hours. The ads sent users to... Weiterlesen

VectraRAT Malware-as-a-Service Lets Hackers Bypass UAC and Hijack Windows Systems

Wed, 16 Sep 2026 15:16:07 +0200

VectraRAT, a previously undocumented Malware-as-a-Service platform that combines remote-access trojan capabilities with automated credential theft and a silent Windows privilege-escalation chain. Unlike the large number of commodity RATs that recycle leaked AsyncRAT, XWorm, or QuasarRAT code, VectraRAT appears to be a purpose-built, full-stack... Weiterlesen

New VectraRAT MaaS Lets Hackers Bypass Windows UAC and Steal Browser Credentials

Wed, 16 Sep 2026 15:15:58 +0200

Threat researchers have uncovered a previously undocumented malware-as-a-service (MaaS) platform called VectraRAT, a full-stack toolkit that gives cybercriminals enterprise-grade intrusion capabilities for as little as $250 a month. Unlike most commodity RATs that fork leaked code from families like AsyncRAT or XWorm, VectraRAT was built entirely... Weiterlesen

N0va-Phishing zielt auf Identitäten in Unternehmen – Attacke über legitime Authentifizierungsflows

Wed, 16 Sep 2026 15:15:55 +0200

LONDON (IT BOLTWISE) – Die Phishing-Kampagne „N0va“ nutzt täuschend echte Identitäts- und Authentifizierungsabläufe, um an gültige Konten und Tokens zu gelangen. Angreifer können so ohne auffällige Malware-Aktivität Zugriff aus laufenden Sitzungen verlängern und SSO-Mechanismen missbrauchen. Besonders betroffen sind Unternehmen in Nordamerika und... Weiterlesen

Chinese-Speaking Hackers Use Noodle RAT Backdoor to Spy on Windows and Linux Systems

Wed, 16 Sep 2026 15:15:48 +0200

Chinese-speaking threat actors are continuing to rely on Noodle RAT, a cross-platform remote access trojan designed to maintain covert access to compromised Windows workstations and Linux servers. Also tracked as ANGRYREBEL and Nood RAT, the malware has been active since at least mid-2016 but was long mistaken for variants of Gh0st RAT, Rekoobe,... Weiterlesen

IT Security News Hourly Summary 2026-09-16 15h : 15 posts

Wed, 16 Sep 2026 15:15:48 +0200

15 posts published in the last hour 12:31Major Cyber Vendors Turn to New UK Testing Program as MITRE Evaluations Face Changes 12:31Chinese-Speaking Hackers Use Noodle RAT Backdoor to Spy on Windows and Linux Systems 12:31US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware 12:02Smishing Triad Hackers Use JWR Phishing Kit to... Weiterlesen

US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware

Wed, 16 Sep 2026 15:12:20 +0200

US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C. The post US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware appeared first on SecurityWeek. Weiterlesen

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

Wed, 16 Sep 2026 15:12:13 +0200

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive... Weiterlesen

Chrome and Edge browsers hijacked by KREMLIN malware for credential and token session theft

Wed, 16 Sep 2026 15:11:53 +0200

Elastic Security Labs uncovered REF9334, a Brazilian banking malware campaign active since May 2025Malware “Kremlin” deploys fake docs and malicious Chrome/Edge extensions to steal banking data1,515 infections found, 98% in BrazilSecurity researchers from Elastic Security Labs have discovered a new Brazilian banking malware campaign that uses... Weiterlesen

speakeasy v2.0.0b8

Wed, 16 Sep 2026 15:10:06 +0200

Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior, filesystem, registry, and network activity for structured JSON reporting. Weiterlesen

2026 Péter Szőr Award shortlisted nominees

Wed, 16 Sep 2026 15:00:05 +0200

VB Congratulates the researchers shortlisted for the 2026 Péter Szőr Award. Read more Weiterlesen

NightEagle targets Russian companies

Wed, 16 Sep 2026 15:00:04 +0200

Over the past year, our Global Emergency Response Team (GERT) has investigated several incidents involving the NightEagle group (APT-Q-95). This group has been active since at least 2023 and originally focused on organizations in Asia, as we reported previously. We have now identified attacks by the group targeting businesses in Russia. This post... Weiterlesen

Atomic macOS (AMOS) Stealer Activity

Wed, 16 Sep 2026 12:14:49 +0200

Modern macOS malware uses deceptive setup guides to steal credentials and sensitive user data. Learn how to identify and block these threats. The post Atomic macOS (AMOS) Stealer Activity appeared first on Unit 42. Weiterlesen

IT Security News Hourly Summary 2026-09-16 12h : 15 posts

Wed, 16 Sep 2026 12:13:20 +0200

15 posts published in the last hour 09:32Meta Plans Smart Glasses Without Camera, Amid Complaints 09:32Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists 09:3236,769 Self-Hosted AI Services Exposed Online — What Security Teams Should Check 09:31Public PoC Released for Apache Superset SQL Injection... Weiterlesen

PAPERMILL Malware Campaign Abuses Signed Notepad++ to Deliver VenomRAT to Windows Users

Wed, 16 Sep 2026 12:13:20 +0200

A newly identified phishing operation tracked as PAPERMILL is abusing a legitimately signed Notepad++ executable, DLL sideloading, and layered in-memory loaders to install VenomRAT on Windows systems. The campaign uses tax-audit lures aimed at Indian recipients and reflects a broader China-nexus pattern of tax-themed malware activity, although the... Weiterlesen

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Wed, 16 Sep 2026 12:13:20 +0200

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline. This article has been indexed from SentinelLabs – We are hunters, reversers, exploit developers, and tinkerers shedding light on the world of malware, exploits, APTs, and cybercrime across all... Weiterlesen

Warum sichere Datenspeicherung für den Mittelstand essenziell ist

Wed, 16 Sep 2026 12:10:17 +0200

Exponentialwachstum, Ransomware & NIS-2: Fünf Gründe, warum sichere Datenspeicherung für den Mittelstand überlebenswichtig ist. Exponentielles Datenwachstum, die Bedrohung durch zielgerichtete Ransomware-Angriffe und immer strengere Compliance-Vorgaben setzen IT-Abteilungen im Mittelstand unter enormen Zugzwang. Dennoch verzögern viele... Weiterlesen

KREMLIN Banking Malware Infects Over 1,500 Systems With Malicious Chrome Extension

Wed, 16 Sep 2026 11:14:02 +0200

KREMLIN is a banking malware operation that plants a hostile browser extension on infected computers. The extension can harvest passwords, session cookies, and other data that can let criminals enter online accounts. The campaign begins with fake JavaScript documents that pose as bank records or invoices. Once opened, they install components and... Weiterlesen

Iranian Hackers Use Fake MRI Results to Infect Victims With CHOSEN BRICK Spyware

Wed, 16 Sep 2026 11:14:02 +0200

Iranian state-linked hackers are using fake MRI scan results to infect selected people with CHOSEN BRICK, a Windows spyware family built for long-term surveillance. The campaign has targeted individuals in the United Kingdom, United States and Netherlands since at least 2025, with dissidents, activists and journalists facing particular risk. The... Weiterlesen

Iranian malware steals Telegram and WhatsApp data from targets

Wed, 16 Sep 2026 11:13:53 +0200

Iranian state cyber actors are using Windows malware called CHOSEN BRICK to target dissidents, activists, and journalists, with capabilities that include stealing Telegram and WhatsApp browser data, emails, screenshots, and audio. The malware has been used internationally since at least 2025 and relies heavily on social engineering, while also... Weiterlesen

China-Aligned Hackers Hide PeckBirdy Malware C2 Inside Casino and Adult Websites

Wed, 16 Sep 2026 11:13:48 +0200

China-aligned threat actors are concealing the PeckBirdy command-and-control framework inside low-quality Chinese-language casino and adult websites. Exploiting a vast and routinely ignored category of internet infrastructure to blend malware traffic into apparent gambling activity. The activity expands on earlier findings by Trend Micro, which... Weiterlesen

Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists

Wed, 16 Sep 2026 11:11:11 +0200

Iranian state cyber actors are deploying malware called CHOSEN BRICK against individuals they see as a threat to the regime, reaching victims through social messaging apps and infecting their Windows devices, three Western intelligence agencies warned. The UK’s National Cyber Security Centre, the FBI and the Netherlands’ AIVD said the campaign has... Weiterlesen

NCSC and Allies Warn of Iranian Spyware Campaign

Wed, 16 Sep 2026 11:11:10 +0200

The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents Weiterlesen

OSIRIS, eine Alternative zu Palantir?

Wed, 16 Sep 2026 11:00:27 +0200

Unter der URL osirisai.live nahm man im Mai diesen Jahres die Open Source OSINT-Plattform OSIRIS ans Netz. Was leistet dieses Portal? Der Artikel OSIRIS, eine Alternative zu Palantir? erschien zuerst auf TARNKAPPE.INFO Weiterlesen

New KREMLIN Malware Installs Chrome Extensions Users Never Approved to Steal Banking Data

Wed, 16 Sep 2026 09:46:20 +0200

Security researchers have uncovered a Brazilian banking-malware operation named KREMLIN that secretly installs malicious extensions in Google Chrome and Microsoft Edge. The malware bypasses Chromium’s built-in extension integrity protections, making the browser load the extension as if the victim had installed and approved it. Elastic Security... Weiterlesen

CHOSEN BRICK Malware Lets Iranian State Hackers Steal Emails, WhatsApp and Telegram Data

Wed, 16 Sep 2026 09:46:20 +0200

Iranian state-linked hackers are using a Windows malware family called CHOSEN BRICK to spy on dissidents, activists, journalists, and other individuals viewed as threats to the Iranian regime. The malware has been active since at least 2025 and has targeted people in the UK, United States, Netherlands, and other countries. A joint advisory from... Weiterlesen

PeckBirdy Malware Uses Chinese Casino and Adult Websites to Hide APT Command-and-Control

Wed, 16 Sep 2026 09:46:20 +0200

China-aligned advanced persistent threat (APT) groups are using low-quality Chinese-language casino and adult websites to conceal command-and-control (C2) infrastructure linked to the PeckBirdy malware framework. The tactic helps attackers blend malicious network activity into a vast ecosystem of suspicious gambling sites that many security teams... Weiterlesen

PAPERMILL Hackers Use ISO Files to Bypass Windows Mark-of-the-Web and Deploy VenomRAT

Wed, 16 Sep 2026 09:46:20 +0200

A newly identified threat cluster dubbed PAPERMILL is using tax-audit phishing emails to deliver VenomRAT malware to Windows users. The campaign abuses ISO disk-image files, DLL sideloading, anti-analysis checks, and in-memory loaders to evade common security controls. JUMPSEC’s Detection and Response Team identified the activity after a phishing... Weiterlesen

Noodle RAT Uses Scheduled Tasks, Cron Jobs and Process Spoofing to Hide on Systems

Wed, 16 Sep 2026 09:46:20 +0200

Noodle RAT, also tracked as ANGRYREBEL and Nood RAT, is a modular remote access trojan used by Chinese-speaking threat actors to maintain covert access to Windows and Linux systems. Active since at least mid-2016, the malware was once incorrectly identified as a Gh0st RAT or Rekoobe variant. Researchers now classify it as a distinct backdoor... Weiterlesen

Health Group Issues Alerts Over 2025 Data Breach

Wed, 16 Sep 2026 09:46:12 +0200

HCRG Care Group warns patients over theft of their data by Medusa ransomware hackers, 18 months after incident occurred This article has been indexed from Silicon UK Read the original article: Health Group Issues Alerts Over 2025 Data Breach The post Health Group Issues Alerts Over 2025 Data Breach appeared first on IT Security News. Weiterlesen

IT Security News Hourly Summary 2026-09-16 09h : 8 posts

Wed, 16 Sep 2026 09:46:12 +0200

8 posts published in the last hour 06:31CISA Warns Hackers Exploit 17 Active Directory Techniques to Gain Control of Enterprise Networks 06:31What happens when AI agent governance is missing at scale 06:31Health Group Issues Alerts Over 2025 Data Breach 06:02KREMLIN Banking Malware Bypasses Chrome Security to Steal Banking Sessions 06:02DeepZero:... Weiterlesen

Hackers Disguise CHOSEN BRICK Malware as AI Apps, Antivirus Software and MRI Results

Wed, 16 Sep 2026 09:46:12 +0200

Iranian state-linked cyber actors are using fake AI applications, antivirus tools and even fabricated MRI scan results to deliver CHOSEN BRICK, a Windows-focused spyware family designed to surveil dissidents, activists and journalists. A joint advisory from the UK National Cyber Security Centre (NCSC), the FBI and the Netherlands’ AIVD warns that... Weiterlesen

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting

Wed, 16 Sep 2026 09:46:11 +0200

This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting The post PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting appeared first on IT... Weiterlesen

Luciferus Uncensored AI Advertised on Hacker Forums for Malware and RAT Development

Wed, 16 Sep 2026 08:09:40 +0200

Threat actors are advertising a new “uncensored” artificial intelligence service, dubbed Luciferus, as a subscription-based assistant that can handle malware-development requests mainstream AI platforms typically reject. Sophos Counter Threat Unit (CTU) researchers identified the offering on August 24, 2026, in a post on the Exploit underground... Weiterlesen

Luciferus Uncensored AI Service Lets Cybercriminals Generate RAT Malware

Wed, 16 Sep 2026 08:09:31 +0200

Cybercriminals are promoting a new “uncensored” artificial intelligence service called Luciferus that allegedly generates malicious code, including components for remote access trojans (RATs), without the safeguards typically found in mainstream AI platforms. Researchers from the Sophos Counter Threat Unit reported that they first noticed a user... Weiterlesen

KREMLIN Banking Malware Bypasses Chrome Security to Steal Banking Sessions

Wed, 16 Sep 2026 08:09:31 +0200

A Brazilian banking malware operation, dubbed KREMLIN, that can silently implant malicious extensions in Google Chrome and Microsoft Edge, bypassing Chromium’s built-in integrity protections to steal credentials, cookies, and active banking sessions. Despite its name, the KREMLIN toolkit shows no apparent Russian connection. The campaign relies on... Weiterlesen

Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers

Wed, 16 Sep 2026 08:00:11 +0200

2026-09-10 • Fortinet • Rachael Liao • win.metamorfo Open article on Malpedia Weiterlesen

The MRI Scan That Wasn’t: Inside Iran’s ‘Chosen Brick’ Malware Campaign Against Its Critics Abroad

Wed, 16 Sep 2026 07:08:45 +0200

The file looked like an MRI scan. Lumbar spine, several grey slices of vertebrae, a heading reading something like 'Disk Herniation and Degeneration.' For a dissident living in exile - someone with a body that has been through things, someone waiting on results - it was a plausible thing to open. Opening it handed Iranian intelligence the... Weiterlesen

can someone tell me if this is a virus?

Wed, 16 Sep 2026 01:30:23 +0200

submitted by /u/Excellent-Dealer-404 [link] [comments] Weiterlesen

KREMLIN-Banking-Malware missbraucht Chrome- und Edge-Erweiterungen zum Diebstahl von Zugangsdaten

Tue, 15 Sep 2026 23:45:13 +0200

BRAZIL / LONDON (IT BOLTWISE) – Eine bislang undokumentierte Banking-Malware aus Brasilien zielt auf Google Chrome und Microsoft Edge ab, um Zugangsdaten und Session-Tokens abzugreifen. Die Angreifer installieren dazu eine bösartige Browser-Erweiterung über eine mehrstufige JavaScript- und Installer-Kette. Auffällig ist die Tarnung der... Weiterlesen

IT Security News Hourly Summary 2026-09-15 21h : 4 posts

Tue, 15 Sep 2026 22:13:23 +0200

4 posts published in the last hour 18:31Iranian spies hit Windows machines with Chosen Brick data-stealing malware 18:02Europol celebrates the International Day of Police Cooperation 18:02Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists 18:00IT Security News Hourly Summary 2026-09-15 20h : 16 posts The post IT... Weiterlesen

IT Security News Hourly Summary 2026-09-15 22h : 3 posts

Tue, 15 Sep 2026 22:13:23 +0200

3 posts published in the last hour 19:31Architecting resilient authentication with Amazon Cognito multi-Region replication 19:31KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens 19:00IT Security News Hourly Summary 2026-09-15 21h : 4 posts The post IT Security News Hourly Summary 2026-09-15 22h : 3 posts... Weiterlesen

KREMLIN-Banking-Malware kapert Chrome und Edge per Browser-Extension

Tue, 15 Sep 2026 21:43:44 +0200

LONDON (IT BOLTWISE) – Eine bislang undokumentierte Banking-Malware namens KREMLIN nutzt in Brasilien gefälschte Bank-Anzeigen und installiert eine schädliche Browser-Erweiterung für Chrome und Edge. Die Kampagne kombiniert mehrstufige JavaScript-Loader, einen C++-Installer und Anti-Sandbox-Checks, um Credentials sowie Session Tokens abzugreifen.... Weiterlesen

Low-quality casino sites conceal highly dangerous threat actors

Tue, 15 Sep 2026 21:40:14 +0200

If your employees are visiting Chinese-language gambling or adult sites, they may not just be wasting time and money, but potentially encountering serious malware hidden behind domains that look like mostly harmless entertainment at first glance. A report from Infoblox urges the security community to pay closer attention to these websites, because... Weiterlesen

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Tue, 15 Sep 2026 21:40:06 +0200

Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious... Weiterlesen

Security Weekly - A CRA Resource: AI Agents Are Helping Both Sides

Tue, 15 Sep 2026 21:31:38 +0200

YouTube Video

AI agents can automate security research and defensive tasks, but similar capabilities are available to attackers. Researchers have also identified malware samples showing evidence of LLM or AI coding-tool involvement.

AI is becoming a tool used across the security landscape rather than something inherently defensive or offensive. Some malware has even incorporated LLM-related components to expand capabilities or perform context-aware actions.

If AI tools increasingly benefit both attackers and defenders, what determines which side gains the bigger advantage?

Subscribe to our podcasts: https://securityweekly.com/subscribe

#Malware #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec

Could AI really wipe out humanity and hijack the internet?

Tue, 15 Sep 2026 20:52:45 +0200

We examine claims and counterclaims about the risks and calls to slow down the pace of AI developmentThere have been some shocking claims in recent days about AI safety: we face a 10% chance of doom; AIs are worse than nukes; a “botnet” threatens the entire internet; it’s all a big tech psyop. We look at six claims and reactions to them. Continue... Weiterlesen

Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer

Tue, 15 Sep 2026 20:50:19 +0200

Malicious OpenClaw skills trick AI agents and users into installing a new AMOS variant that steals extensive data at scale. Weiterlesen

HEAVYGRAM und CHOSEN BRICK: Telegram-gesteuerte Windows-Malware für Spionage

Tue, 15 Sep 2026 20:49:41 +0200

LONDON / LONDON (IT BOLTWISE) – Die US-, britische und niederländische Cybersecurity-Gemeinschaft beschreibt eine Windows-Malware, die über Telegram-Bots gesteuert wird. Unter den Namen HEAVYGRAM und CHOSEN BRICK soll sie eingesetzt werden, um Chatverläufe und E-Mails zu kopieren, Screenshots zu erstellen und Audio über das Mikrofon aufzuzeichnen.... Weiterlesen

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

Tue, 15 Sep 2026 20:45:33 +0200

Iranian state cyber actors are targeting individuals using social messaging apps to deploy surveillance and data-stealing malware on their Windows machines, three Western governments warned. In all observed cases, Chosen Brick has infected Windows systems exclusively. Iran has used it since at least 2025 to take over individuals’ devices, stealing... Weiterlesen

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Tue, 15 Sep 2026 20:45:23 +0200

Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can copy a target's emails and chat messages, take... Weiterlesen

UK, US and Netherlands warn over Iranian state spyware campaign

Tue, 15 Sep 2026 20:44:50 +0200

Cyber attackers linked to Iran’s Ministry of Intelligence and Security are targeting opponents and opposition groups with Windows spyware Weiterlesen

Virus Bulletin: VB2025 highlights

Tue, 15 Sep 2026 20:32:05 +0200

YouTube Video

Three days in Berlin with some of the top professionals in cybersecurity: researchers, threat intelligence specialists, and malware analysts from around the world. This was VB2025.

We look forward to seeing you in Seville, Spain, 14 - 16 October 2026, for VB2026.
Find out more: https://www.virusbulletin.com/conference/vb2026/

Pentest bestanden und trotzdem gehackt: Wo Red Teaming und APT Simulationen mehr bieten

Tue, 15 Sep 2026 20:30:41 +0200

Die Firma hat den Pentest bestanden, wurde aber trotzdem gehackt? Erfahre, warum Red Teaming und APT-Simulationen die IT-Abwehr verbessern. Der Artikel Pentest bestanden und trotzdem gehackt: Wo Red Teaming und APT Simulationen mehr bieten erschien zuerst auf TARNKAPPE.INFO Weiterlesen

How to Keep Malware’s Rotating Infrastructure From Becoming a Detection Gap

Tue, 15 Sep 2026 19:16:01 +0200

You can’t detect today’s attacks with yesterday’s threat intelligence; that’s how you could briefly formulate the challenge many modern SOCs face. Indicators lose relevance quickly. New infrastructure appears daily. SOCs struggle to keep up. This is happening because malware campaigns increasingly rely on rotating domains, hosting... Weiterlesen

VectraRAT Can Hack Windows Enterprises for $250 per Month

Tue, 15 Sep 2026 19:12:39 +0200

The full-service malware-as-a-service (MaaS) platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive remote access. Weiterlesen

The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

Tue, 15 Sep 2026 18:27:28 +0200

Elastic Security Labs has tracked REF9334, a Brazilian banking malware operation, since May 2025. Its toolkit is called KREMLIN (as named by the malware author, Kr3mlin4rt1st), though nothing about the operation is Russian. Lures impersonate twelve Brazilian banks; error messages and code comments are written in Portuguese, and the operators'... Weiterlesen

Hackers Advertise Uncensored Luciferus AI Service on Underground Forums

Tue, 15 Sep 2026 18:26:59 +0200

Hackers are advertising a new “uncensored” artificial intelligence service called Luciferus, positioning it as a subscription assistant willing to process malware-development requests that mainstream AI systems would reject. Sophos Counter Threat Unit (CTU) researchers discovered the offering on August 24, 2026, on the Exploit underground forum.... Weiterlesen

How to Keep Malware’s Rotating Infrastructure From Becoming a Detection Gap

Tue, 15 Sep 2026 18:26:58 +0200

BambooToken Malware: MQTT-gestütztes C2 und DLL-Sideloading

Tue, 15 Sep 2026 18:26:34 +0200

LONDON (IT BOLTWISE) – Sicherheitsforscher beschreiben eine plattformübergreifende Malware namens BambooToken, die MQTT als Kommunikationskanal für Command-and-Control (C2) nutzt. Die Aktivität soll mindestens seit Februar 2023 andauern und laut Beobachtungen bis Juli 2026 reichen. Im Fokus stehen laut den Ermittlungen Organisationen in Asien und... Weiterlesen

IT Security News Hourly Summary 2026-09-15 18h : 8 posts

Tue, 15 Sep 2026 18:26:23 +0200

8 posts published in the last hour 15:31CISA Warns of Active GitLab Exploitation as Attackers Target Server Files 15:31MacOS 27 – First Boot, (Tue, Sep 15th) 15:31Most Fraudulent Hires Receive Credentials Before Detection 15:02Most Firms Unable to Recover Quickly from Ransomware 15:02Companies’ AI strategies don’t account for their agentic tools... Weiterlesen

Cisco FMC Flaws Give Ransomware and APTs a Path Into Internal Networks

Tue, 15 Sep 2026 18:26:23 +0200

Cisco Talos says attackers are exploiting FMC flaws to steal credentials, tunnel into internal networks, and deploy Qilin ransomware. This article has been indexed from eSecurity Planet Read the original article: Cisco FMC Flaws Give Ransomware and APTs a Path Into Internal Networks The post Cisco FMC Flaws Give Ransomware and APTs a Path Into... Weiterlesen

BambooToken malware controls Windows and Linux systems via MQTT

Tue, 15 Sep 2026 18:22:31 +0200

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...] Weiterlesen

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Tue, 15 Sep 2026 18:22:05 +0200

Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks... Weiterlesen

KI-Pornografie: Jailbreak bringt sechs Entwickler ins Gefängnis

Tue, 15 Sep 2026 17:30:24 +0200

KI-Pornografie führt in China zu Haftstrafen: Sechs Entwickler umgingen Sicherheitsfilter und machten daraus ein lukratives Geschäftsmodell. Der Artikel KI-Pornografie: Jailbreak bringt sechs Entwickler ins Gefängnis erschien zuerst auf TARNKAPPE.INFO Weiterlesen

Pro-Ukraine Hacking Cat Group Deploys New Malware Against Russian Targets

Tue, 15 Sep 2026 16:47:06 +0200

A pro-Ukraine hacktivist group known as Hacking Cat has significantly escalated its cyber operations against Russian targets by deploying newly developed malware, marking a strategic shift from simple website defacements to sophisticated data destruction campaigns. Researchers at Kaspersky uncovered two previously undocumented malware... Weiterlesen

Most Firms Unable to Recover Quickly from Ransomware

Tue, 15 Sep 2026 16:44:35 +0200

Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours Weiterlesen

Ransomware-Angriff auf Berlin - Warum nun die Sicherheit der digitalen Belegschaft im ...

Tue, 15 Sep 2026 16:43:33 +0200

Mit ihrem Angriff auf das Netz der Berliner Landesverwaltung hat uns die Erpressergruppe Rhysida mehr als anschaulich die starke Anfälligkeit der ... Weiterlesen

heise & c't: LG-Smart-TVs: Forscher vergleichen Tracking mit Malware📺

Tue, 15 Sep 2026 16:36:40 +0200

YouTube Video

Phishing Attacks Abuse Trusted Email Infrastructure and URL Cloaking to Evade Security Filters

Tue, 15 Sep 2026 15:47:35 +0200

Phishing operators are increasingly shifting away from malware-laden attachments and toward trusted delivery services, authenticated domains, and multi-stage URL cloaking designed to defeat conventional email inspection. The continuously running VBSpam comparative test evaluated ten public full email-security products and one open-source solution... Weiterlesen

Ransomware Doesn’t Just Break Systems. It Breaks People.

Tue, 15 Sep 2026 15:47:34 +0200

The most enduring impact of ransomware attacks is human: stress, fear, job loss, and long-term consequences that rarely show up in incident reports. Weiterlesen

eBook: Identity-First Threat Intelligence

Tue, 15 Sep 2026 15:44:58 +0200

Attackers increasingly bypass traditional defenses by logging in with credentials that have already been stolen, exposed, or sold on the Dark Web. As infostealer malware accelerates credential theft, organizations need greater visibility into identity risk across Active Directory, IAM, and authentication environments. Download the e-book to... Weiterlesen

Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler

Tue, 15 Sep 2026 15:43:16 +0200

A Swiss court has sentenced a 52-year-old Ukrainian ransomware developer to 12 years and nine months in prison for his role in attacks on companies including Stadler Rail. Zurich District Court found that the man developed LockerGoga, MegaCortex, and Nefilim, but was not the mastermind behind the operations. He also received a ten-year ban from... Weiterlesen

ClickFix, das gefälschte CAPTCHA, das dich die Malware selbst installieren lässt

Tue, 15 Sep 2026 14:46:06 +0200

Bemerkenswert ist, dass die nationalen Behörden das Phänomen ernst genommen haben, das schweizerische Bundesamt für Cybersicherheit hat bereits im ... Weiterlesen

HBO Max’s verified Reddit account hijacked to spread malware

Tue, 15 Sep 2026 14:46:02 +0200

Cybercriminals used HBO Max’s verified Reddit account to run 108 malicious ads that tricked people into installing information stealers. This article has been indexed from Malwarebytes Read the original article: HBO Max’s verified Reddit account hijacked to spread malware The post HBO Max’s verified Reddit account hijacked to spread malware... Weiterlesen

GuardBreaker: Ein Kommentar reicht, um KI-Scanner auszutricksen

Tue, 15 Sep 2026 14:42:56 +0200

Eine fingierte Anfrage soll die Schutzmechanismen eines LLM auslösen und die Malware-Analyse vorzeitig stoppen. Weiterlesen

The easiest way to find and remove spyware on your Android phone

Tue, 15 Sep 2026 14:41:03 +0200

With Android's more open ecosystem, it's not hard to download apps that are unsafe. Here's how to scan for spyware. Weiterlesen

HBO Max Reddit account hijacked in PasteSwitch malware campaign

Tue, 15 Sep 2026 12:46:20 +0200

A compromised verified HBO Max Reddit account was used to distribute more than 100 malicious advertisements as part of a large cross-platform ClickFix campaign targeting both Windows and macOS users. Researchers at Hudson Rock and Kirk from ADAMnetworks traced the incident to a broader operation they named PasteSwitch, which combines fake software... Weiterlesen

IT Security News Hourly Summary 2026-09-15 12h : 13 posts

Tue, 15 Sep 2026 12:45:50 +0200

13 posts published in the last hour 09:31PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers 09:31Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack 09:31EU To Propose Social Media Restrictions For Minors 09:31Peer Pressure: Inside the Sality Botnet Disruption Operation 09:31Crackdown on Italian... Weiterlesen

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz

Tue, 15 Sep 2026 12:43:31 +0200

Attackers compromised the verified official HBO Max Reddit account, u/hbomax, and used its trusted advertising status to launch a ClickFix campaign targeting macOS and Windows devices with information-stealing malware. Screenshot of the fraudulent ad (Source: Alex Cutts) ClickFix has been rising in popularity among cybercriminals. It’s a social... Weiterlesen

Hackers Abuse VSSAdmin to Extract NTDS.dit and Delete Windows Recovery Copies

Tue, 15 Sep 2026 11:15:50 +0200

Windows attackers are turning a built-in recovery feature into a tool for disruption. By abusing Volume Shadow Copy Service, intruders can copy protected data, access the Active Directory database, and erase recovery copies after ransomware. The technique blends into Windows activity. Backup software, remote management tools, and administrators... Weiterlesen

53 Prozent mehr Cyber-Angriffe auf deutsche Unternehmen im August, Ransomware ...

Tue, 15 Sep 2026 11:15:14 +0200

All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing · Home · News · Newsletter · Management · Netzwerke. Weiterlesen

IT Security News Hourly Summary 2026-09-15 10h : 16 posts

Tue, 15 Sep 2026 11:15:10 +0200

16 posts published in the last hour 07:32Top 10 Best Serverless Security Solutions in 2026 07:32Amazon Looks To Expand UK Drone Deliveries 07:31Top 10 Best Cloud Infrastructure Entitlement Management (CIEM) Tools in 2026 07:31The Oracle of Delphi Will Steal Your Credentials 07:31Hackers Hijack HBO Max Reddit Account to Push 108 ClickFix Malware... Weiterlesen

53 Prozent mehr Cyber-Angriffe auf deutsche Unternehmen im August, Ransomware ...

Tue, 15 Sep 2026 11:11:16 +0200

Auch Phishing-Mails und Ransomware-Angriffe nehmen weltweit deutlich zu. Check Point Research (CPR), die Sicherheitsforschungsabteilung von Check ... Weiterlesen

Hacked HBO Reddit Account Used for Malware Delivery via ClickFix Attack

Tue, 15 Sep 2026 11:11:02 +0200

Ads led to a ClickFix page designed to trick macOS and Windows users into installing malware. The post Hacked HBO Reddit Account Used for Malware Delivery via ClickFix Attack appeared first on SecurityWeek. Weiterlesen

Reddit-Account von HBO Max gehackt

Tue, 15 Sep 2026 11:09:51 +0200

Kriminelle kaperten einen Reddit-Account und missbrauchten HBO-Max-Werbung für Malware-Angriffe. Nutzer sollten besonders wachsam sein. Weiterlesen

Marcus Hutchins: Cybersecurity Has An AI Doomer Problem.

Tue, 15 Sep 2026 11:02:24 +0200

YouTube Video

The AI industry's proximity to cybersecurity is causing clueless AI doomers to flood the zone. Experts and real issues are now being drowned out by increasingly absurd cyber-apocalypse fantasies imagined by people with no real world experience. From self-replicating AI models, to turning the entire internet into a botnet. The doomers are losing their minds and taking the cybersecurity industry with them.

Suyu verabschiedet sich mit einem Knall, bietet native PC-Performance

Tue, 15 Sep 2026 11:00:28 +0200

Der Emulator Suyu bietet mit dem letzten Release v0.0.4 eine beinahe native PC-Performance, die vieles flüssiger laufen lässt. Der Artikel Suyu verabschiedet sich mit einem Knall, bietet native PC-Performance erschien zuerst auf TARNKAPPE.INFO Weiterlesen

HBO Max Reddit Account Hijacked to Spread PasteSwitch ClickFix Malware

Tue, 15 Sep 2026 09:09:18 +0200

Threat actors hijacked HBO Max’s verified Reddit account, u/hbomax, and used its trusted advertising identity to distribute 108 malicious ClickFix advertisements in a coordinated 48-hour malvertising campaign. The operation, tracked as PasteSwitch, delivered platform-specific malware to macOS and Windows users, including information stealers,... Weiterlesen

Hackers Abuse Windows Shadow Copies to Steal Active Directory Credentials and Kill Ransomware Recovery

Tue, 15 Sep 2026 09:09:12 +0200

Windows Volume Shadow Copy Service, or VSS, is designed to create point-in-time copies of files and volumes. Administrators and backup products use it to restore data after accidental deletion, corruption, or system failure. However, attackers increasingly abuse the same Windows feature to steal credentials, disrupt recovery, and prepare... Weiterlesen

HBO-Max-Reddit-Account gehijackt: ClickFix-Malware via fake Ads

Tue, 15 Sep 2026 09:09:10 +0200

LONDON (IT BOLTWISE) – Angreifer haben den offiziellen HBO-Max-Reddit-Account kompromittiert und damit ClickFix-Werbeanzeigen verteilt. Über 48 Stunden sollen laut Sicherheitsanalysen 108 bösartige Anzeigen geschaltet worden sein. Die Kampagne nutzte soziale Täuschung, bei der Opfer selbst Befehle in Windows oder macOS ausführen. Betroffen sind... Weiterlesen

Hackers Turn Windows Shadow Copies Into a Tool for Credential Theft and Ransomware

Tue, 15 Sep 2026 09:09:02 +0200

Threat actors are increasingly weaponizing Microsoft’s Volume Shadow Copy Service (VSS) for two distinct objectives: removing recovery options before ransomware deployment and extracting credential material from protected Windows files. The shift means VSS telemetry should no longer be treated as a simple backup or disk-maintenance event, but as... Weiterlesen

KUMO-Domain-Recon-Tool

Tue, 15 Sep 2026 09:04:56 +0200

Kumo 蜘蛛 is a domain OSINT & security reconnaissance framework. Drop a domain, get everything back in real time across 26 parallel modules: DNS, open ports, leaked credentials, infostealer infections, vulnerable endpoints, subdomains, CVEs, malware families, and more. Weiterlesen

[Open Source] Richiesta di revisione della sicurezza e audit del codice per un locale

Tue, 15 Sep 2026 09:00:15 +0200

submitted by /u/zmykerd [link] [comments] Weiterlesen

Hi! Dev here, I would like to help develop the PS5 jailbreak scene. How can I get started?

Tue, 15 Sep 2026 09:00:15 +0200

Hi everyone, I’m a developer looking to learn how PS5 exploits and homebrew work. I know C++ and C# but I'm completely new to PlayStation security.Where should I start? Any recommended write-ups, documentation, Github repos, or dev Discords to study the current exploits? Thanks! submitted by /u/sacalaca5375 [link] [comments] Weiterlesen

Fortinet PPL bypass