Chinese FamousSparrow targets gov’t orgs in Latin America with SparroWocky backdoor
ESET believes the campaign's goal is to gather intelligence on how Latin American governments are responding to growing US pressure on Chinese economic interests.
ESET believes the campaign's goal is to gather intelligence on how Latin American governments are responding to growing US pressure on Chinese economic interests.
The attackers also stole cryptocurrency from more than 7,000 wallets and transferred about $10.7 million worth of cryptocurrency to North Korea.
Cisco has addressed 6 security vulnerabilities, including a zero-day that provides root access to affected appliances.
In brief: Microsoft and Google fix actively exploited zero-days, Anthropic reveals fourth hacking incident, and more.
BlueMoon exploit chain includes the recently disclosed CVE-2026-85046 and CVE-2026-87491 in Chrome V8 engine, and CVE-2026-85880 in Windows ALPC.
The implant appears to be a second-stage payload deployed after attackers exploited a critical RCE flaw affecting F5 BIG-IP systems.
Users are strongly advised to apply the security updates as soon as possible.
Threat actors are increasingly targeting proprietary AI research, models, and related intellectual property.
Researchers used the method to access email data from a victim’s connected Gmail account and send the data back to an attacker.
The vulnerability allows attackers to inject PHP code into Magento’s template system and execute it without user interaction.
Showing elements 21 - 30