Cybersecurity News - Page 52

The infection chain uses a loader and a .NET-based backdoor component that leverages OpenAI as a C&C channel.

Attackers have used a combination of spear-phishing emails, hijacked business conversations, and compromised accounts to post fake freight listings on load boards.

Ruter confirmed that the Chinese company has access to the bus’s software updates, diagnostics, and battery systems.

The malicious campaign used a ZIP attachment, which masqueraded as a VPN invoice.

BadCandy grants attackers root-level command execution on compromised systems.

In brief: Microsoft patches a WSUS flaw, a major US telecom supplier compromised by nation-state hackers, and more.

Peter Williams used his high-level access to the company’s secure network to download and transfer the classified components.

The attackers remained undetected for nearly nine months.

The October 2025 update delivers improvements across multiple sections, including techniques, groups, campaigns, and software.

Aisuru is related to “TurboMirai” malware, general class of Mirai-variant DDoS botnets capable of generating multi-tb/sec and -gpps direct-path DDoS attacks.