Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware
Coverage of: Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware
Malware & Ransomware
Ransom Cartel ransomware creator sentenced to 16 years in prison
Maksim Silnikau, the creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison for his role in ransomware attacks against at least 18 companies worldwide.
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order to deliver malware to travelers and steal credentials in an operation we call…
Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29.
Google's synced passkeys can be stolen by malware
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager
Russian spies turn public Wi-Fi into malware delivery systems
Keyloggers, audio-visual surveillance, and token theft on CaptivePortal
AUR malware wave forces Arch Linux to disable every package push
Arch Linux disabled every push to the Arch User Repository after renewed malicious package takeovers exposed weaknesses in its community software workflow.
Arch Linux disables AUR package adoption to stop malware flood
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages.
Xcsset is back: macOS malware that worms through Xcode projects
Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching and AI to decode its logic.
US bank places trust in ransomware crew that promised to delete its data
History suggests this was not wise
Kimi K3 and GLM 5.2 can create undetectable malware for $2
As part of Incalmo’s mission to make AI safely ubiquitous, we do safety research on the frontier cyber capabilities of models. Recently, to help anti-virus systems stay ahead of the OSS threat frontier, we created PathoGen, a novel system that turns (open) models1 into evasive…
NPM publish-time malware scanning and dual-use metadata
As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…