Virtualization security: attack layers and misconfiguration impact IntroductionIncidents in virtual environments can begin with a software vulnerability... 2026-11-6 10:0:12 | 阅读: 19 | 收藏 | Securelist - securelist.com monitoring network security ssh esx

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603 Executive summaryIn 2025, several threat actors exploited CVE-2025-53770 and CVE-2025... 2026-11-5 10:0:11 | 阅读: 38 | 收藏 | Securelist - securelist.com memory attackers microsoft toolshell ransomware

MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices In an industrial network, malicious activity can be hard to tell apart from normal dat... 2026-11-3 10:0:7 | 阅读: 22 | 收藏 | Securelist - securelist.com network mlep monitors asset neuron

CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations IntroductionAs part of proactive threat monitoring, Kaspersky’s Cyber Threat Intellig... 2026-11-2 08:0:24 | 阅读: 27 | 收藏 | Securelist - securelist.com attackers windows network c2

Filter generation in practice: from algorithms to LLMs A modern organization protects its information systems with a whole suite of technolog... 2026-10-30 10:0:44 | 阅读: 25 | 收藏 | Securelist - securelist.com llm algorithmic security agents

Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia SAS... 2026-10-29 08:0:15 | 阅读: 25 | 收藏 | Securelist - securelist.com xaml c2 windows loader payload

Millions of security cameras at risk: DoS vulnerability in Intelbras devices BackgroundNetwork-connected surveillance cameras are now widespread in both home and... 2026-10-28 10:0:18 | 阅读: 27 | 收藏 | Securelist - securelist.com firmware intelbras cameras username

An insecure neighbor: how a vulnerability chain led to an isolation bypass in cloud infrastructure SAS... 2026-10-27 12:0:19 | 阅读: 35 | 收藏 | Securelist - securelist.com priv cloud salt plane network

Deploying AI agents securely: how Kaspersky products mitigate AI threats IntroductionAI agents and associated tooling are becoming increasingly common in corp... 2026-10-26 10:0:18 | 阅读: 22 | 收藏 | Securelist - securelist.com agents malicious software security kes

How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia IntroductionBack in October 2022, Kaspersky GReAT was looking into a peculiar adverti... 2026-10-22 06:0:48 | 阅读: 39 | 收藏 | Securelist - securelist.com bootkit blacklotus blackx security payload

Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) Threat ResponseThreat Respons... 2026-10-21 15:18:4 | 阅读: 22 | 收藏 | Securelist - securelist.com php 2026 security php2shell

Operation FlashHole: Lazarus breaks security, defies control In January, we responded to the Lazarus Group’s novel attack campaign against South Ko... 2026-10-21 02:7:29 | 阅读: 35 | 收藏 | Securelist - securelist.com c2 payload techhub cubridge clienthub

The journey of a paper unicorn: adventures inside a modern warehouse IntroductionImagine you’ve ordered a small paper unicorn from an online marketplace.... 2026-10-20 07:0:45 | 阅读: 34 | 收藏 | Securelist - securelist.com warehouse network attacker wms security

MacSync under the microscope: new delivery methods and a new payload MacSync is a relatively young, rapidly evolving family of crypto/info stealers. First... 2026-9-24 10:0:21 | 阅读: 43 | 收藏 | Securelist - securelist.com stage macsync payload hxxps malicious

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO Executive summaryIn April 2026, we at Kaspersky’s Global Emergency Response Team (GER... 2026-9-21 10:0:40 | 阅读: 44 | 收藏 | Securelist - securelist.com gpo payload windows ransomware sysvol

The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents IntroductionTorrent trackers have long been abused for distributing malicious softwar... 2026-9-17 13:0:53 | 阅读: 50 | 收藏 | Securelist - securelist.com stage torrent c2 loader shellcode

NightEagle targets Russian companies Over the past year, our Global Emergency Response Team (GERT) has investigated several... 2026-9-16 10:0:11 | 阅读: 32 | 收藏 | Securelist - securelist.com attackers network microsoft tunneling

Angry Birds: Toy Ghouls’ new toys SOC, TI and IR posts... 2026-9-4 10:15:39 | 阅读: 44 | 收藏 | Over Security - Cybersecurity news aggregator - securelist.com hivemq broker attackers bird windows

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set While monitoring Mirage Kitten activity, we uncovered a previously undocumented malwar... 2026-9-1 07:16:3 | 阅读: 46 | 收藏 | Over Security - Cybersecurity news aggregator - securelist.com c2 pollcat noderabbit windows

ValleyRAT masquerading as adware Attackers typically try to pass off malware as legitimate applications or as potential... 2026-8-31 10:15:43 | 阅读: 42 | 收藏 | Over Security - Cybersecurity news aggregator - securelist.com library malicious libcef qnwallpaper valleyrat