Latest cybersecurity reporting from selected sources.

A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations

ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users

Microsoft Detection and Response Team (DART) details how it has uncovered malicious AI applications as cyber criminals manipulate organizations adopting AI tools

Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs

AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication

High-volume phishing campaign delivers Phorpiex malware via malicious Windows Shortcut files

SHADOW#REACTOR is a multi-stage Windows malware campaign that stealthily deploys the Remcos RAT using complex infection techniques

Malicious Windows packer named pkr_mtsi used as a flexible malware loader in malvertising campaigns

Microsoft has revoked over 200 fraudulent code-signing certificates used in a ransomware campaign involving fake Teams installers by threat group Vanilla Tempest

The backdoor is a sophisticated VBA-based malware targeting Microsoft Outlook

A new Microsoft AI agent, named Project Ire, is able to autonomously classify malware at a global scale with a high level of precision

Russian military intelligence-linked hackers are using a new malware called “Authentic Antics” to secretly access Microsoft cloud email accounts, the UK's NCSC reports

Ukraine’s CERT-UA has identified a new AI-powered malware, dubbed “LameHug,” which executes commands on compromised Windows systems in cyber-attacks, targeting the nation’s security and defense sector

A new malware campaign targeting Windows and Linux systems has been identified, deploying tools for evasion and credential theft

Fortinet has identified a new Windows RAT operating stealthily on compromised systems with advanced evasion techniques

Microsoft said the ongoing phishing campaign is designed to infect hospitality firms with multiple credential-stealing malware

Phishing attack exploits social engineering techniques alongside Microsoft Teams and remote access software to deploy BackConnect malware

Trend Micro found that Chinese espionage group Mustang Panda is deploying malware via legitimate Microsoft tools, enabling it to bypass ESET antivirus applications

Microsoft has observed a new variant of XCSSET, a sophisticated macOS malware that infects Xcode projects

Microsoft detailed how Russian espionage group Secret Blizzard is leveraging infrastructure of other threat actors to target the Ukrainian military with custom malware