Citrix has disclosed eight vulnerabilities in NetScaler ADC and NetScaler Gateway appliances, including two critical vulnerabilities actively exploited in the wild. These devices are critical network perimeter components handling VPN, remote access, load balancing, and authentication. The two actively exploited vulnerabilities allow unauthenticated remote code execution and denial-of-service attacks. Citrix has released updates to address these issues and recommends immediate patching and restricting management interfaces to trusted networks.
NeedyMantis is a modular malware framework used by a China-based threat actor in targeted attacks against telecommunications, government, scientific, manufacturing, retail, medical non-profit, and intergovernmental organizations primarily in Belarus, Russia, and Thailand. It was discovered following the May 2026 Daemon Tools supply chain attack, where thousands of computers were infected. The malware uses a custom executable file format and DLL sideloading for persistence and evasion. It is deployed after initial access to maintain long-term presence and support follow-on operations. The malware communicates with command-and-control servers via WebSockets and can load additional modules to extend its capabilities. The threat actor group behind this malware, Storm-3069, is not attributed to a Chinese nation-state actor. Microsoft has provided a detailed technical analysis but no patch or remediation guidance is indicated.
This report summarizes malware trends observed in the first half of 2026, highlighting shifts in attacker focus and techniques. Infostealers increasingly target session tokens, cookies, recovery codes, and cryptowallet data rather than traditional passwords. Malicious shortcut files (LNK) remain a common infection vector. There is a notable rise in abuse of legitimate platforms through SEO poisoning, malvertising, fraudulent code signing, and compromises of software repositories such as npm, PyPI, and Crates.io. Supply chain attacks targeting software delivery channels and CI/CD pipelines are growing. Remote Management and Monitoring (RMM) tools are frequently abused due to their signed status and low detection rates. Legitimate websites are increasingly compromised to host malicious code via administrator account takeover or unpatched vulnerabilities. Popular exfiltration channels include Discord, Telegram, and GoFile, used for data theft and evasion. Dead drop resolvers and blockchain infrastructure abuse are also prevalent. The report does not describe a specific vulnerability or exploit but provides an overview of evolving malware tactics.
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [...]
This report describes a social engineering threat targeting cybersecurity professionals through fake consultancy offers and job proposals. Attackers use plausible but suspicious offers, such as paid consultations or prestigious job opportunities, to gain trust and extract sensitive, non-public information. The initial contact serves as a screening to identify valuable targets who may then be manipulated into abusing their professional access and relationships. The report also highlights the release of CAIRN, an open-source toolkit for hunting AI-integrated malware, emphasizing the evolving threat landscape with AI-driven attacks.
RemotePanel and BoundSiphon are two .NET malware components delivered together via malicious NuGet packages impersonating Chinese UI libraries. RemotePanel is a persistent remote access tool masquerading as the Windows Time service, providing extensive control over infected systems. BoundSiphon is an in-memory stealer targeting browser credentials, cryptocurrency wallets, password managers, and sensitive documents. The malware uses a blockchain-based mechanism to dynamically resolve its command and control servers, enabling infrastructure rotation without redeployment. The campaign involves typosquatting private or internal Chinese .NET libraries, affecting developer workstations and CI/CD environments. The malware ecosystem is modular, separating persistence from data theft, allowing operators to maintain capabilities while swapping components. Tens of thousands of downloads have been recorded, and the packages remain available on NuGet at the time of reporting. Blackpoint Cyber has detections for key behaviors in the infection chain, aiding defense despite evolving payloads and infrastructure.
A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]
ClosedQuorum is a newly identified Windows malware that leverages multiple AI models, including Google Gemini, DeepSeek, Qwen, and Mistral, to autonomously decide its actions during the post-compromise phase of an attack. This AI-driven approach allows the malware to adapt its behavior dynamically based on the environment and objectives. No specific affected software versions or exploitation details have been provided. There is no known exploit in the wild at this time, and no patch or remediation guidance is available.
At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not especially remarkable – it asked the recipient to review some attached requirements and provide a price quotation for a fiber optic system and appeared to impersonate an employee of a legitimate company.
CLOSEDQUORUM is a Windows malware binary representing the first documented implant utilizing autonomous AI-driven command and control. Discovered through Cisco Talos' CAIRN project, it delegates tactical decisions to a panel of commercial large language models including DeepSeek, Qwen, Mistral, and Google Gemini. The system operates through plurality voting among AI models to select actions for credential harvesting and crypto wallet theft, eliminating the need for continuous human operator involvement. The 16.4MB Go-compiled executable employs structured JSON schema to constrain LLM responses to executable attack choices. While containing placeholder credentials in public distribution, development builds demonstrate compile-time injection of operator-specific API keys and Discord webhooks. This architecture represents a significant shift toward effort displacement in cyber operations, where entire attack phases execute autonomously without human bottlenecks, though introducing new dependencies on commerci...
A malicious NPM package named indexed-btree, impersonating the legitimate sorted-btree package, was discovered to contain hidden malware in its JavaScript prototype method. This supply chain attack accumulated over 2 million weekly downloads by creating a credible GitHub repository and avoiding typical detection methods. The malware collects system information, communicates with a hardcoded Slack channel and Telegram chat, and uses a blockchain smart contract for command-and-control. Multiple related malicious packages have also been identified and removed after millions of downloads. The campaign is ongoing and represents a sophisticated threat to organizations using the NPM ecosystem.
CAIRN is a research toolkit developed by Cisco Talos for hunting, classifying, and tracking AI-integrated malware by analyzing metadata artifacts left by attackers. It identifies malware that operationalizes or exploits AI systems by extracting cognitive artifacts such as prompt templates, API endpoints, and evasion strings without requiring binary execution. CAIRN uses acquisition filters, relationship graphing, YARA rules, and semantic discovery to detect and attribute AI-enabled malware families. This metadata-first approach enables scalable and fast detection of emerging threats that integrate AI functionality.
A widespread campaign impersonates LastPass and at least 40 other companies to distribute a kernel-level malware called Rapuncel via fake installers hosted on GitHub. The malware disables 145 security products by loading a malicious kernel driver and steals sensitive information including passwords, cryptocurrency wallets, and tokens from multiple applications. The campaign uses SEO manipulation and dynamic redirect chains to lure victims. Rapuncel installs as a persistent Windows service, continuously killing security tools and stealing data until the kernel driver is physically removed.
RatHat is an Android trojan that uses generative AI to automate real-time device navigation and control, enhancing its adaptability and evasion capabilities. It steals credentials, mimics banking apps, intercepts SMS, and gains administrator-level permissions. The malware persists by reinstalling itself if removed and uses advanced keylogging techniques, including hardware-level monitoring of user input. It communicates with a command-and-control server via a secure reverse tunnel and abuses Android debugging tools for system-level access. RatHat is distributed through smishing and malvertising and appears linked to a Chinese threat actor.
Microsoft Security Research published an interesting blog post "TerminalFix campaign deploys a reverse tunnel through multistage intrusion" about a malware campaign. The aspect that I want to take a closer look at, is the fact that the threat actors used PNG files with steganography. I reached out to the researchers and they kindly shared the IOCs for the PNG files with me.
A malware campaign involving the npm package 'indexed-btree' demonstrates how attackers evade traditional supply chain defenses by embedding malicious code in the package's runtime behavior instead of installation scripts. This technique allows the malware to bypass install-time security checks and execute malicious actions during normal package usage.
A malware campaign uses fake GitHub repositories impersonating LastPass Authenticator and other software brands to distribute the Rapuncel infostealer. The campaign delivers a Microsoft-signed kernel driver that disables 145 antivirus and EDR products, allowing the infostealer to harvest credentials, cryptocurrency wallet data, session tokens, and sensitive documents. The driver bypasses common protections by operating in kernel mode and is currently not blocked by Microsoft. The malware persists via a Windows service, re-killing security tools on reboot.
This security news roundup highlights multiple cybersecurity developments including a critical SAP vulnerability (CVE-2026-44756) allowing unauthenticated memory corruption, a WordPress plugin file-upload flaw enabling mass webshell uploads, and a zero-click Plugin4Shell vulnerability affecting AI coding assistants that permits silent malicious plugin updates. Additionally, it covers the sentencing of a ransomware developer, new malware linked to bug bounty hunting, and other notable cybercrime and defense updates.
