⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The HelloNet campaign delivers malicious modules through the compromised ViPNet update system to target organizations.
Kaspersky researchers uncovered an ongoing APT campaign, dubbed HelloNet, targeting Russian organizations in government, energy, transport, education, logistics, and industrial sectors since at least May 2026. The attackers exploited the ViPNet update system (a secure networking suite) to deploy malware via DLL sideloading, placing a malicious file (wtsapi32.dll) in the ViPNet directory.
The article reports on the HelloNet APT campaign, which exploits the ViPNet update system to launch implants. It targets large Russian organizations in multiple sectors, including government, energy, and logistics.
FortiGuard Labs has uncovered a global phishing campaign using obfuscated JScript and disguised .ttf (TrueType Font) files to deliver malware. The attackers employ Lua loaders with low detection rates to distribute remote access trojans (RATs) and infostealers, including Agent Tesla and Remcos.
This article announces SWARM, Tenable's hands-on agentic AI build event at Black Hat 2026. It highlights how security teams are creating open-source agents to automate tedious work, while warning about the complexity of AI agent sprawl.
FortiGuard Labs has uncovered a global phishing campaign using sophisticated techniques to deliver remote access trojans (RATs) and infostealers. Attackers employ obfuscated JScript and disguise malicious payloads as .ttf (TrueType Font) files, which then deploy Lua-based loaders to evade detection.