Jamf Threat Labs says a new macOS backdoor, CloudSyncD, poses as a Zoom installer, tricks users into entering their password and uses it with sudo to run a persistent implant as root.
Cisco Talos says China-nexus actor UAT-11587 used a new Rust backdoor, Antino, that hides its command traffic in Outlook and OneDrive to spy on government and policy bodies in eight Asian countries.
Fakturownia, a Polish e-invoicing service with more than 600,000 customers, says an attacker exploited a vulnerability and copied account data, password hashes, API tokens and bank details.
Sucuri researchers detailed SC, a WordPress backdoor that keeps copies in at least eight places across files, the database and shared memory, each able to rebuild the others.
Attackers drained $387.5 million from Bitget's hot wallets on September 24 by abusing zero-days in third-party security appliances. The exchange suspects North Korean hackers.
OFAC designated 10 targets tied to a Tren de Aragua ATM jackpotting scheme that used Ploutus malware, including alleged developer Anibal Alexander Canelon Aguirre.
The city of Vicksburg, Mississippi temporarily shut down its computer systems after a ransomware attack, disrupting utility payments while emergency services stayed online.
Edtech provider Frontline Education is notifying school districts that attackers exploited a third-party software flaw and stole employee data, including Social Security numbers.
MetaMask says a security incident hit part of its infrastructure and is exiting affected Ethereum validators in its non-custodial staking operations, while stating wallets face no immediate threat.
President Lee Jae Myung ordered a thorough investigation after a string of intrusions exposed data of more than 60,000 customers at South Korean banks and lenders.
Vercel's CEO confirmed a KVM zero-day reported via the Vercel Sandbox bounty program that reportedly lets guest code gain root on the host. No CVE or patch has been published yet.
A suspected ShinyHunters member known as 'Rey' was detained in Jordan and is helping the FBI track down other members of the extortion group, Reuters reported citing unnamed sources.
