PoeLLM Malware Hides C2 Addresses in GitHub Poems, Infects 3,000+
October 8, 2026
Lumen’s Black Lotus Labs says PoeLLM malware infected over 3,000 servers, hiding C2 addresses in poems on GitHub to mine
Endpoint Security
PoeLLM Malware Hides C2 Addresses in GitHub Poems, Infects 3,000+
Lumen's Black Lotus Labs says PoeLLM malware infected over 3,000 servers, hiding C2 addresses in poems on GitHub to mine cryptocurrency on AI infrastructure.
Dell Patches Root-Level Flaw CVE-2026-86360 in System Update Tool
Dell fixed a critical path traversal, CVE-2026-86360, in its System Update CLI that lets unauthenticated remote attackers run code as root, plus four more bugs.
Android October 2026 Update Patches 25 Flaws, Seven Rated Critical
Google's Android security bulletin for patch level 2026-10-01 fixes 25 vulnerabilities, seven of them critical, with no in-the-wild exploitation reported.
ClickFix Variant Smuggles Payloads Through Browser Cache
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the Windows Run dialog's character limit.
ClingSTUN Botnet Abuses STUN Protocol for C2, Exploits Dozens of Flaws
FortiGuard and Nozomi detail Cling, a Linux botnet that hides command traffic in STUN requests and exploits about two dozen router and IoT vulnerabilities.
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100 Ukraine-linked organizations.
New Spectre-v2 BTR Attack Leaks Linux Root Password Hashes
Academics disclosed a Spectre-v2 variant called BTR that bypasses existing mitigations and recovers Linux root password hashes on Intel systems in minutes.
Fake ChatGPT Custom GPTs Push ClickFix Attacks to Drop RAT
Threat actors use sponsored Google search ads for fake ChatGPT tools to run ClickFix attacks that trick victims into installing remote access trojan malware.
Kiteworks Patches Critical Flaw Found During Precautionary Shutdown
Kiteworks discovered and patched a previously unknown critical flaw during a precautionary shutdown ordered after a federal warning of an imminent attack.
Apple Patches CoreGraphics Zero-Day Used in Targeted Attacks
Apple patched CVE-2026-86950, an out-of-bounds write vulnerability in CoreGraphics exploited in extremely sophisticated targeted attacks reported by Meta.
Dell Patches Root-Level Flaw CVE-2026-86360 in System Update Tool
October 7, 2026
Dell fixed a critical path traversal, CVE-2026-86360, in its System Update CLI that lets unauthenticated remote attackers run code as
Android October 2026 Update Patches 25 Flaws, Seven Rated Critical
October 7, 2026
Google’s Android security bulletin for patch level 2026-10-01 fixes 25 vulnerabilities, seven of them critical, with no in-the-wild exploitation reported.
ClickFix Variant Smuggles Payloads Through Browser Cache
October 6, 2026
Microsoft Threat Intelligence says a new ClickFix variant hides a script in the browser cache as a PNG, sidestepping the
ClingSTUN Botnet Abuses STUN Protocol for C2, Exploits Dozens of Flaws
October 6, 2026
FortiGuard and Nozomi detail Cling, a Linux botnet that hides command traffic in STUN requests and exploits about two dozen
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
September 30, 2026
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100
New Spectre-v2 BTR Attack Leaks Linux Root Password Hashes
September 30, 2026
Academics disclosed a Spectre-v2 variant called BTR that bypasses existing mitigations and recovers Linux root password hashes on Intel systems
Fake ChatGPT Custom GPTs Push ClickFix Attacks to Drop RAT
September 30, 2026
Threat actors use sponsored Google search ads for fake ChatGPT tools to run ClickFix attacks that trick victims into installing
Kiteworks Patches Critical Flaw Found During Precautionary Shutdown
September 30, 2026
Kiteworks discovered and patched a previously unknown critical flaw during a precautionary shutdown ordered after a federal warning of an
Apple Patches CoreGraphics Zero-Day Used in Targeted Attacks
September 29, 2026
Apple patched CVE-2026-86950, an out-of-bounds write vulnerability in CoreGraphics exploited in extremely sophisticated targeted attacks reported by Meta.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.