Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign. A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft, and a cryptocurrency fraud scheme targeting American audiences.
FortiGuard Labs uncovered a series of compromises involving the P2PInfect botnet targeting misconfigured Google Kubernetes Engine (GKE) clusters. The attacks exploited exposed Redis instances to gain initial access, enabling persistent botnet enrollment and dormancy within cloud environments.
FortiGuard Labs uncovered a series of compromises involving the P2PInfect botnet targeting Google Kubernetes Engine (GKE) clusters. The attacks exploited misconfigured Redis instances, allowing the botnet to persistently enroll vulnerable systems into its network.
FortiGuard Labs uncovered a series of P2PInfect botnet compromises targeting misconfigured Google Kubernetes Engine (GKE) clusters. The attacks exploited exposed Redis instances to deploy malware, enabling persistent botnet enrollment and dormancy periods before activating malicious payloads.
ESET researchers describe new tools and techniques that the Webworm APT group.
ESET researchers describe new tools and techniques that the Webworm APT group recently added to its arsenal