Almost 400 fake crypto trading add-ons in the Moltbot/OpenClaw AI assistant project have been discovered, potentially leading users to install information-stealing malware. These add-ons, known as skills, masquerade as cryptocurrency trading automation tools and target various platforms. The malicious skills share the same command-and-control infrastructure and use social engineering to convince users to execute commands that steal crypto assets. The supply chain attack relies on social engineering and lacks security review in the skills publication process. Security experts warn about the inherent risks of endpoint-native AI agents and emphasize the need for proper security controls and architectural design considerations.
CVE-2025-59818 is a critical remote code execution vulnerability in Zenitel TCIS-3+ versions prior to 9.2.3.3. It allows unauthenticated attackers to execute arbitrary commands on the underlying system by exploiting improper handling of uploaded file names. The vulnerability has a CVSS score of 10.0, indicating maximum severity with full impact on confidentiality, integrity, and availability. No public exploits are currently known, but the ease of exploitation and severity make this a significant threat. European organizations using Zenitel TCIS-3+ should urgently apply patches once available and implement strict file upload controls. Countries with critical infrastructure and high adoption of Zenitel products, such as Germany, France, and the Netherlands, are most at risk.
Two IP addresses accounted for the majority of the 1.4 million exploitation attempts observed over the past week. The post Cryptominers, Reverse Shells Dropped in Recent React2Shell Attacks appeared first on SecurityWeek .
Wiz and Permiso have analyzed the AI agent social network and found serious security issues and threats. The post Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks appeared first on SecurityWeek .
On February 4, 2026, KRVTZ-NET IDS detected network reconnaissance activity targeting Fortigate VPN devices, specifically scanning the /remote/logincheck endpoint associated with CVE-2023-27997. This vulnerability could allow unauthorized access or remote code execution. No active exploitation or payload delivery was observed, and no patches are currently available for this specific alert. The activity is low severity and likely represents early-stage reconnaissance. European organizations using Fortigate VPNs, especially in critical infrastructure and government sectors, should be aware of this scanning activity.
Last week, a new AI agent framework was introduced to automate "live". It targets office work in particular, focusing on messaging and interacting with systems. The tool has gone viral not so much because of its features, which are similar to those of other agent frameworks, but because of a stream of security oversights in its design.
ShinyHunters has claimed the theft of 14 million records from the US bakery-cafe chain’s systems. The post Hackers Leak 5.1 Million Panera Bread Records appeared first on SecurityWeek .
The article details a sophisticated supply chain attack on Notepad++ that occurred from July to October 2025. Attackers compromised the update infrastructure, deploying various malicious payloads through three distinct infection chains. The attack targeted individuals and organizations in Vietnam, El Salvador, Australia, and the Philippines. The infection methods evolved over time, using NSIS installers, Metasploit downloaders, and Cobalt Strike Beacons. The attackers employed clever techniques to evade detection, including the abuse of legitimate software and the use of multiple C2 servers. The article provides a comprehensive timeline of the attack, describes the different execution chains, and offers guidance on detecting traces of the attack.
Rapid7 Labs has uncovered a sophisticated campaign attributed to the Chinese APT group Lotus Blossom, involving a new custom backdoor named Chrysalis. The attack compromised Notepad++ infrastructure to deliver the backdoor. Analysis revealed multiple custom loaders, including one using Microsoft Warbird for obfuscation. The Chrysalis backdoor has extensive capabilities for information gathering, file operations, and remote command execution. Additional artifacts found include Cobalt Strike beacons and Metasploit payloads. The campaign shows Lotus Blossom evolving its tactics, mixing custom and off-the-shelf tools with advanced obfuscation techniques to evade detection.
The KRVTZ-NET IDS alerts from February 3, 2026, report automated reconnaissance activity detected by intrusion detection systems, involving IP addresses linked to Censys, a known internet scanning service. This activity is categorized as reconnaissance in the cyber kill chain and involves scanning HTTP User-Agent strings to gather information about potential targets. No specific vulnerabilities, exploits, or malware are associated with these alerts, and no active exploitation is reported. The severity is low, reflecting the preliminary nature of reconnaissance without direct impact on confidentiality, integrity, or availability. European organizations should treat this as an early warning and maintain vigilance, as reconnaissance can precede targeted attacks. Mitigation involves network monitoring, tuning IDS/IPS to detect scanning patterns, network segmentation, and maintaining asset inventories. No patches or immediate remediation are required. The threat is low severity but warrants continued observation to prevent escalation.
Infostealer threats are expanding beyond Windows, targeting macOS and leveraging cross-platform languages like Python. Recent campaigns use social engineering to deploy macOS-specific infostealers such as DigitStealer, MacSync, and AMOS. These stealers use fileless execution and native macOS utilities to harvest credentials and sensitive data. Python-based stealers are also on the rise, allowing attackers to quickly adapt and target diverse environments. Additionally, threat actors are abusing trusted platforms like WhatsApp and PDF converter tools to distribute malware such as Eternidade Stealer. These evolving threats blend into legitimate ecosystems and evade conventional defenses, posing significant risks to organizations across various operating systems and delivery channels.
A sophisticated phishing campaign has been detected that utilizes a multi-stage approach to evade detection. The attack begins with a procurement-themed email containing a PDF attachment. This PDF redirects victims to another PDF hosted on trusted cloud storage, which then leads to a fake Dropbox login page. The attackers exploit trusted platforms and harmless file formats to bypass security measures. The campaign uses social engineering tactics to harvest credentials, which are then exfiltrated to attacker-controlled infrastructure via Telegram. This method proves effective by leveraging legitimate business processes, trusted file types, and reputable cloud services to appear authentic and bypass automated security checks.
Hackers rely on evolved vishing and login harvesting to compromise SSO credentials for unauthorized MFA enrollment. The post ShinyHunters-Branded Extortion Activity Expands, Escalates appeared first on SecurityWeek .
Yesterday, a single IP address (%%ip:204.76.203.210%%) scanned a number of our sensors for what looks like an anthropic API node. The IP address is known to be a Tor exit node.
A hacker published malicious versions of four established VS Code extensions to distribute a GlassWorm malware loader. The post Open VSX Publisher Account Hijacked in Fresh GlassWorm Attack appeared first on SecurityWeek .
MicroWorld Technologies, the maker of eScan antivirus, experienced a supply-chain compromise where malicious updates were pushed through the legitimate eScan updater. This multi-stage malware establishes persistence on infected systems, enables remote access for attackers, and blocks automatic security mechanisms. Although no known exploits are currently observed in the wild, the threat poses a medium severity risk due to its potential impact on confidentiality, integrity, and availability. European organizations using eScan antivirus are at risk, especially those in countries with higher adoption of this product. The attack leverages trusted update channels, making detection and prevention more challenging. Mitigation requires immediate verification of update integrity, network monitoring for unusual remote access, and enhanced endpoint detection capabilities. Countries with significant use of eScan and strategic sectors reliant on this antivirus are more likely to be targeted. The threat underscores the critical risk of supply-chain attacks in cybersecurity defenses.
CVE-2026-24071 is a high-severity TOCTOU race condition vulnerability in Native Instruments' Native Access software, affecting versions up to 3.22.0. The vulnerability arises because the privileged helper's XPC service verifies client code signatures based on the client's PID, which is susceptible to PID reuse attacks. An attacker with low privileges can exploit this flaw to impersonate a trusted process, potentially gaining elevated privileges and causing full compromise of confidentiality, integrity, and availability. Exploitation requires local access and high attack complexity but does not require user interaction. No known exploits are currently in the wild. European organizations using Native Access for managing Native Instruments products are at risk, especially those in music production, audio engineering, and related creative industries. Mitigation involves applying vendor patches once available, restricting local access to trusted users, and monitoring for suspicious local IPC activity. Countries with significant creative industries and high adoption of Native Instruments software, such as Germany, the UK, France, and the Netherlands, are most likely to be affected.
