CyberNews.work Exclusive: China-Nexus Hackers Utilize Fake Tax Filing Utility to Deploy DcRAT Malware A sophisticated hacking operation, suspected to be linked to Chinese actors, has been uncovered using a fake Indian tax filing utility as a vector to deploy the highly potent DcRAT malware. The malicious software, which can evade detection by traditional security systems … Read more
As AI-powered threat detection and mitigation solutions become increasingly prevalent, organizations are facing a daunting challenge: evaluating the effectiveness of these advanced security platforms. A recent report highlights six key capabilities that set leaders apart from mere “bolt-on” AI solutions, but what does this mean for the average company struggling to stay ahead of evolving … Read more
A new threat is emerging on the cybersecurity landscape, one that leverages artificial intelligence (AI) models to discover previously unknown software vulnerabilities. These vulnerabilities can be exploited by attackers to gain unauthorized access to systems and data, making them a major concern for organizations worldwide. The AI-powered vulnerability discovery process typically involves training machine learning … Read more
A critical vulnerability in Linux’s Epoll feature has been made public, allowing attackers to gain root access on vulnerable systems. The “Bad Epoll” flaw, discovered by Jaeyoung Chung of Seoul National University’s Computer Security Lab, can be exploited using a proof-of-concept (PoC) code released by the researcher. The vulnerability affects Linux distributions based on kernel … Read more
North Korean Hackers Target Open Source Developers in Supply Chain Attacks A sophisticated campaign by North Korean hackers has been targeting open source software developers with a backdoor and an information stealer, compromising repositories on GitHub and other package registries to inject malicious code into popular projects. The operation, dubbed “PolinRider,” is part of a … Read more
A sophisticated hacking campaign, suspected of originating from China, has compromised Indian businesses and individuals by using a fake tax filing utility to deploy the DcRAT malware. The hackers’ tactics exploit a vulnerability in Microsoft’s Windows operating system, leveraging AI-powered threat analysis to evade detection. The attackers created a convincing fake tax filing tool, which … Read more
Cybersecurity teams are increasingly relying on Artificial Intelligence (AI) to identify and address software vulnerabilities, but experts warn that this new approach comes with its own set of challenges. In 2026, the use of AI-powered Security Operations Centers (SOCs) has become more prevalent, but not all platforms are created equal. As organizations explore the benefits … Read more
Security professionals have long been aware of the potential for artificial intelligence (AI) models to discover and exploit software vulnerabilities, but a recent trend highlights just how easily this can be done. Over the past few months, several instances have come to light where AI-powered tools have identified previously unknown vulnerabilities in popular software packages, … Read more
A Massive Malware Campaign Unfolds: SANS ISC Stormcast Highlights the Threat The latest SANS Internet Stormcast has shed light on a significant malware campaign that’s been unfolding in recent days, affecting organizations across various sectors. The malicious activity is attributed to a highly sophisticated strain of malware known as “Emotet,” which has been wreaking havoc … Read more
The cybersecurity industry has been obsessed with finding vulnerabilities for years, but it’s not the discovery itself that’s the problem – it’s what happens next. With the help of AI, organizations are now flooded with more data than ever before, making it impossible to prioritize and act on the most critical issues. For security teams, … Read more