malware — Cybersecurity News

Silent Lynx Exploits WinRAR Flaw to Target CIS Governments with Reverse Shells

RedSide Security October 16, 2026 Cyber Attacks 24 views

Silent Lynx has been targeting CIS government organizations with four distinct infection chains, including a WinRAR exploit, to deploy reverse shells for persistent access.

Tensorlake npm Package Compromised: Shai-Hulud Worm Harvests Credentials from Developer Machines

RedSide Security October 08, 2026 Cyber Attacks 51 views

The npm package 'tensorlake' was compromised with the Shai-Hulud credential-stealing worm, allowing attackers to harvest secrets, establish persistence, and execute remote code on developer machines.

Eight Malicious npm Packages Deliver Overlord RAT and Stealer, Notching 40,000 Downloads

RedSide Security October 08, 2026 Cyber Attacks 117 views

Researchers uncover a long-running npm supply chain campaign that has delivered Overlord RAT and a credential stealer through eight packages downloaded over 40,000 times since 2023.

UAC-0277 Compromises 100+ Websites to Spread LunexStealer via Fake Cloudflare Checks

RedSide Security October 07, 2026 Cyber Attacks 152 views

CERT-UA has identified over 100 compromised websites that use fake Cloudflare verification checks to trick users into installing LunexStealer malware. The campaign is attributed to threat cluster UAC-0277.

New Open-Source Tool: TeleSink - Turning Malware C2 Against Itself

RedSide Security June 10, 2026 Tools & Technology 246 views

TeleSink is an open-source malware analysis tool that redirects Telegram bot traffic into a controlled local environment, enabling real-time extraction of bot tokens, chat IDs, and exfiltrated data without manual deobfuscation.

FIFA World Cup 2026 Fans Targeted by Massive Wave of Ticket Scams, Malware, and Phishing Attacks

RedSide Security June 05, 2026 Cybercrime 237 views

Cybercriminals are aggressively targeting FIFA World Cup 2026 fans through thousands of fake websites, phishing campaigns, malicious streaming applications, and banking malware. Security researchers warn that ticket fraud, account takeovers, identity theft, and financial scams are expected to surge as the tournament approaches.

Critical Everest Forms Pro Vulnerability Actively Exploited to Compromise WordPress Sites

RedSide Security June 05, 2026 Vulnerability 146 views

Threat actors are actively exploiting a critical remote code execution vulnerability in the Everest Forms Pro WordPress plugin. The flaw allows unauthenticated attackers to execute arbitrary PHP code, create administrator accounts, deploy web shells, and fully compromise affected websites.

VECT 2.0 Ransomware Can Damage Files Its Own Decryptor Cannot Reliably Restore

RedSide Security June 05, 2026 Cybersecurity 158 views

Security researchers have uncovered serious design flaws in the VECT 2.0 ransomware family that can leave victim files permanently damaged, even when a ransom is paid and a decryptor is provided. Analysis reveals multiple implementation errors, race conditions, and encryption logic flaws that can result in incomplete recovery and irreversible data loss.

PCAPGraph: Threat Hunting at the Speed of Triage

RedSide Security June 04, 2026 Tools & Technology 222 views

PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet captures into interactive graphs. Designed for rapid incident response, it helps analysts quickly identify malicious communications, visualize host relationships, investigate indicators of compromise (IoCs), and uncover suspicious activity without spending hours manually reviewing packets.

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

RedSide Security May 27, 2026 CVE 200 views