Security news aggregator

Latest coverage for Worm

The Worm tag covers self-spreading malware that can spread rapidly, plus reported incidents, technical analysis, disruption efforts, and defensive guidance.

7 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Worms are malware programs that replicate and spread between systems without needing to attach to another file. They may move through exploitable network services, vulnerable applications, removable media, or other connected paths; the route depends on the family. Their defining concern is rapid propagation: one compromised host can seed many others, causing outages or resource exhaustion and, in some cases, delivering additional code or enabling unauthorized access.

Security teams should assess worm reports alongside the affected software and exposure details. Priorities include applying patches or mitigations, disabling unnecessary services, and segmenting networks to limit movement. Monitor for unusual scanning, repeated connection attempts, and clusters of similar infections. During an incident, isolate affected systems, restrict relevant communications where practical, preserve forensic evidence, and verify that vulnerable hosts are remediated before reconnecting them.

Volume over time

Weekly headline count for the current query.

Showing 7 most recent headlines Filtered view
Bank Info Security 1 month, 1 week ago

Miasma Worm Hits Microsoft's AI Coding Ecosystem

Attackers Compromised More Than 70 Microsoft Repositories in Under 2 MinutesAttackers linked to the Miasma supply-chain campaign compromised a Microsoft contributor account and pushed malicious code into more than 70 repositories, using artificial intelligence-assisted coding tools as an infection path to steal credentials and developer secrets at scale.

Bank Info Security 9 Jun 2026, 8:30 a.m. Incident · 5 stories Artificial Intelligence Compromise Credentials Infection Malicious Code Microsoft Supply Chain Theft Worm

Latest Mini Shai-Hulud Worm Steals Credentials, Includes Wiper, Now Open SourceA new Shai-Hulud variant has infected multiple npm repositories and jumped to other widely used JavaScript and Python packages. Designed to rapidly propagate, the worm steals over 100 different types of credentials and can wipe systems, including if developers try to delete it.

Bank Info Security 14 May 2026, 5:30 a.m. Artificial Intelligence Credentials Infection JavaScript Node.js Open Source Python Supply Chain Worm

Telephone-Oriented Attack Delivery Social Engineering Tactic ThrivesThe phishing industry is a never ending font of innovation. Cyber fraudsters are determined to worm their way into your inbox. Recent attacks involve callback phishing, a social engineering tactic designed to break down victims' defenses by spurring them into calling the scammers themselves.

Bank Info Security 4 Jul 2025, 4:30 a.m. Phishing Social Engineering Victims Worm
Bank Info Security 1 year, 3 months ago

Goffee Deploys PowerShell Implant to Target Russian Entities

Goffee Targets Russian Entities With USB-Based PowerShell MalwareA threat actor that focuses on Russian targets is spreading a new PowerShell implant that includes modules for stealing files from thumb drives and propagating itself through a USB worm. Its targets include critical infrastructure sectors such as energy, telecommunications and government.

Bank Info Security 15 Apr 2025, 6:30 a.m. Critical Infrastructure Government Malware PowerShell Russia Theft Threat Actor Worm
Bank Info Security 2 years, 3 months ago

Raspberry Robin Morphs, Now Spreads via Windows Script Files

Malware Platform Operators Taket Steps to Obfuscate CodeThreat actors behind malware distribution platform Raspberry Robin worm have shifted tactics to make the malware harder to detect and for researchers to analyze. Hackers deploying Raspberry Robin - often a precursor to a ransomware attack - now use Windows Script Files.

Bank Info Security 12 Apr 2024, 12:00 p.m. Malware Microsoft Ransomware Research Threat Actor Worm
Bank Info Security 2 years, 4 months ago

A New Self-Spreading, Zero-Click Gen AI Worm Has Arrived!

Researchers Created Worm That Can Exfiltrate Data, Spread Spam and Poison AI ModelsResearchers have created a zero-click, self-spreading worm that can steal personal data through applications that use chatbots powered by generative artificial intelligence. Dubbed Morris II, the malware uses a prompt injection attack vector to trick AI-powered email assistant apps.

Bank Info Security 6 Mar 2024, 10:30 a.m. Artificial Intelligence Attack Vector Email Malware PII Research Spam Theft Worm Zero-Click
Bank Info Security 2 years, 7 months ago

Russia Uses Upgraded USB Worm for Espionage Against Kyiv

'LitterDrifter' Worm Is Designed to Support Large-Scale Collection OperationA hacking group linked to Russian domestic intelligence and known as Gamaredon is deploying a worm dubbed "LitterDrifter" that is spread through thumb drives to attack Ukrainian organizations. LitterDrifter has two functions: automatic propagation and communication with command-and-control servers.

Bank Info Security 21 Nov 2023, 7:30 a.m. Command and Control Hacking Russia Ukraine Worm