Latest cybersecurity reporting from selected sources.

A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations

A new macOS malware chain using staged scripts and a Go-based backdoor has been attributed to FlexibleFerret, designed to steal credentials and maintain system access

The cyber espionage group uses a previously undocumented network implant to drop two downloaders, LittleDaemon and DaemonLogistics, which deliver a backdoor

The backdoor is a sophisticated VBA-based malware targeting Microsoft Outlook

A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques

Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324

Malicious dbgpkg package on PyPI poses as a debugging utility but acts as a delivery mechanism for a stealthy backdoor

Mandiant revealed that Chinese espionage actor UNC3886 has deployed modified versions of the TinyShell backdoor across multiple Juniper OS routers

A Golang backdoor is using Telegram as its command and control (C2) channel, an approach that makes detection harder for defenders, according to Netskope researchers

Walmart detailed findings about an unknown PowerShell backdoor, which was potentially utilized alongside a new Zloader variant

The ELF backdoor, initially thought to be a variant of existing malware, has a Windows and a Linux version

Rapid7 warned that users of Justice AV Solutions (JAVS) Viewer v8.3.7 recording software are at high risk of stolen credentials and having malware installed

Malware is linked to UAE-backed spies

Legitimate software used to deploy backdoor malware

Chinese threat actor used malware in attacks

The malware focuses on surveillance operations, according to a new advisory by Check Point Research

The group continued to use the LookBack backdoor, but also several new types of malware

The malware targeted 24 organizations across Africa, South Asia, Europe and the Middle East

The malware can cloak a malicious payload that could be remotely controlled by an adversary