Security Bulletin

Cybercriminals increasingly use VPNs and residential proxy networks to mask malicious activity, making traditional IP reputation and blocklist approaches less effective.

The Windows variants, WIN_DRV and WIN_PLUS, retain the core architecture of their Linux predecessor, including command-and-control (C2) protocols and encryption methods.

Ceros aims to provide visibility and control over AI agents by logging every session, including the user and device involved.

Kaspersky researchers have identified that malicious actors are exploiting the Steam Workshop platform, specifically through the Wallpaper Engine application, to distribute malware.

In addition to executing entirely in memory, the malware's infection chain incorporates other anti-analysis techniques designed to frustrate detection.

To enforce the ban, social media platforms will be required to implement age verification for new users, likely through ID uploads or facial age scans.

The attackers send emails designed to raise alarm about potential account compromise and OTP abuse, tricking recipients into opening an attachment, according to the Genians Security Center.

The DragonForce ransomware operation, active since 2023 and linked to the Scattered Spider threat group, has employed custom Go-based malware dubbed "Backdoor.Turn".

GhostTree leverages NTFS junctions, a file system feature that allows one directory to point to another.

The National Testing Agency announced the restrictions on Tuesday, aiming to disrupt cheating networks that allegedly use Telegram to sell fake exam papers and spread misinformation before the NEET re-test scheduled for June 21.

The researcher, known as BobDaHacker, said they exploited a flaw in FIFA's back-end API by registering as a player agent.

An open letter signed by dozens of security experts asked the government to reverse export restrictions on Anthropic's Claude Fable 5 and Mythos 5 models.