Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws A sophisticated Linux backdoor has been discovered, infecting systems with malware that uses the Session Traversal Utilities for NAT (STUN) protocol to turn them into proxy servers. The malware, dubbed ClingSTUN, not only exploits two dozen vulnerabilities for initial access but also sets up persistence mechanisms … Read more
Google has temporarily shut down its Open Source Software Vulnerability Reward Program (OSS VRP) to product vulnerability submissions, citing an influx of invalid automated reports that are overwhelming the system. The move comes as part of a broader trend in the cybersecurity industry where AI-powered tools are increasingly being used to discover vulnerabilities, but also … Read more
Cybersecurity teams are struggling to keep pace with AI-powered attacks that are outpacing traditional threats. These attacks are fast, relentless, and automated, forcing organizations to rethink their security strategies. The latest Black Hat USA 2026 conference highlighted the growing concern over AI-driven attacks, which are changing the game for cybersecurity teams. According to a Dark … Read more
Chinese Hackers Use Deceptive Tactics to Steal AI Experts’ Credentials A sophisticated cyber espionage campaign has been uncovered, targeting artificial intelligence (AI) experts working for US think tanks, universities, and law firms. Chinese hackers impersonated US officials in a series of phishing attacks designed to steal sensitive credentials, highlighting the increasing sophistication of state-sponsored hacking … Read more
IoT Devices Compromised by New Linux Malware Strain, Used as Proxy Nodes for Malicious Activity A newly discovered Linux malware strain, dubbed “ClingSTUN” by Fortinet’s FortiGuard Labs researchers, has been found to exploit 24 known vulnerabilities in Internet of Things (IoT) devices, compromising their security and turning them into proxy nodes for malicious activity. This … Read more
A Major Player in ATM Jackpotting Scams Brought to Justice In a significant development that highlights the ongoing efforts of law enforcement agencies to combat cybercrime, the alleged developer of Ploutus malware has been arrested and appeared in a US court. Anibal Alexander Canelon Aguirre, also known as “Prometheus” and “The Engineer,” is accused of … Read more
As OpenAI continues to push the boundaries of artificial intelligence, it’s introducing a new feature that aims to combat AI-generated text scams in the European Union. Starting this month, ChatGPT and Codex will invisibly watermark text generated by these models, making it easier to detect when users copy or share AI-created content without permission. The … Read more
Cybersecurity teams are facing an unprecedented challenge as AI-driven attacks become increasingly sophisticated and automated. The latest developments in artificial intelligence (AI) are revolutionizing the way threat actors operate, leaving security professionals scrambling to keep up. The rise of large language models (LLMs), particularly those at the forefront of development, has given attackers a significant … Read more
Chinese Hackers Unleash Sophisticated AI Cyber Espionage Campaign Against US Experts A sophisticated cyber espionage campaign has been uncovered, in which Chinese hackers impersonated high-ranking US officials to steal sensitive information from experts working on artificial intelligence (AI) policy. The campaign, attributed to the China-aligned threat actor TA419, demonstrates a new level of sophistication in … Read more
A New Threat Erupts: ClingSTUN Turns Vulnerable IoT Devices into Proxy Nodes, Exposing Enterprises to Malicious Activity Researchers have uncovered a sophisticated new malware strain, dubbed “ClingSTUN,” that is turning vulnerable Internet of Things (IoT) devices into proxy nodes for malicious activity. This malware exploits 24 known flaws in a wide range of IoT devices, … Read more