Microsoft Security Blog
90-day archive
All news
Search by headline, summary or source name. Every item links to its own original page.
Category: Malware & Threats
Clear filters
569 news
Page 15 of 19
CSO Online
Autonomous agents attack Azure using compromised identities and destroying resources
Cyble
Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl
The Hacker News
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Security Affairs
Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities
SecurityWeek
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability
Security Affairs
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1
Security Affairs
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116
Security Affairs
Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION
Tenable Blog
Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities
The Hacker News
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Security Affairs
Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem
SecurityWeek
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining
Krebs on Security
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
آیتینا
دیپسیک، کوئن، میسترال و جمینای به خدمت یک بدافزار ویندوزی درآمدند!
CSO Online
Documentation placeholder domain used in ClickFix attacks
SecurityWeek
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Malwarebytes Blog
Kothamine malware uses Tailscale’s tailcat to evade network detection
The Hacker News
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Security Affairs
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
The Hacker News
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
The Cyber Express
The Cyber Express Weekly Roundup: ShinyHunters’ FBI Breach Claim, North Korea’s WaterPlum Campaign, and the EU KIDS Act
SOCRadar
Dark Web Profile: Blue Locker Ransomware
Security Affairs
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
Infosecurity Magazine
RemControl Banking Trojan Gives Attackers Remote Control of Android Devices
Help Net Security
MacSync info-stealing malware hides malicious commands in an iCloud calendar
Cyble
Inside the Telecom Attack Surface: SS7, BGP Hijacking, and the Technical Reality of Nation-State Intrusions
Help Net Security
Fake payroll desktop apps hand attackers a route to company paychecks
SANS Internet Storm Center
A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th)
Security Affairs