Posts of last few hours

Remus is a Windows information stealer that is gaining attention for the way it hides before taking data. The malware surfaced on underground marketplaces in March 2026 and is built to collect browser information, cryptocurrency wallet data, passwords, and files from compromised computers. Its newer versions also seek credentials linked to AI tools, putting personal […]

The post Remus Infostealer Removes Syscall Hooks to Evade EDR and Steal Sensitive Credentials appeared first on Cyber Security News.

A new malware campaign is using blockchain technology to keep its control servers out of reach. The operation tricks visitors to compromised business websites into running a malicious command, then steals bank logins and two-factor authentication codes. The campaign has been active since at least November 2025. It combines a fake human-verification prompt, malicious PowerShell […]

The post Hackers Hide Malware Servers on Blockchain to Steal Bank Logins and 2FA Codes appeared first on Cyber Security News.

Security researcher MSNightmare, also known as Nightmare-Eclipse, has released BigDiskBuster, a proof-of-concept denial-of-service technique designed to stop Microsoft Defender Antivirus from completing platform and security-intelligence updates. The project is presented as a successor to UnDefend. The researcher claims it works across all supported Windows versions, although the experimental code remains buggy; compatibility has not been […]

The post MSNightmare has Released a Windows Defender Update DoS Vulnerability Called BigDiskBuster appeared first on Cyber Security News.

Hackers are exploiting a critical cPanel and WHM flaw to place Mirai malware on exposed servers, extending a botnet threat normally associated with connected devices. The activity produced a sharp rise in suspicious Telnet traffic and exposed a wider Internet security problem. Its use directly against servers creates concern for organizations that may not associate […]

The post Hackers Exploit cPanel CVE-2026-41940 Auth Bypass to Deploy Mirai Malware appeared first on Cyber Security News.

Japanese software company Helpfeel has confirmed a data breach on its screenshot-sharing platform Gyazo, in which attackers exploited a vulnerability in its image upload server, stealing approximately 23.62 million user records and metadata tied to hundreds of millions of images. Gyazo is a cloud-based screenshot and screen-recording service that uploads users’ captures automatically and generates a shareable link they can post in chats, forums, or social media. According to the company, an attacker exploited the … More →

The post Hackers exploit Gyazo server flaw to steal 23.6 million user records appeared first on Help Net Security.

North Korean-linked WaterPlum operators have turned job hunting into a route for theft. By posing as recruiters, they persuaded software developers to run harmful files during apparently normal online interviews. The campaign, also known as Contagious Interview, reached at least 30,000 computers in more than 100 countries between December 2025 and July 2026. The attackers […]

The post North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto appeared first on Cyber Security News.

A newly identified Android banking Trojan called RatHat uses phone features for account theft. The malware can guide itself through an infected device, capture banking logins, intercept verification codes and reconstruct a victim’s screen-lock PIN or pattern. The campaign begins with deception rather than a software flaw. Victims receive SMS phishing messages or see malicious […]

The post New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN appeared first on Cyber Security News.

Push-bombing, real-time phishing kits, and helpdesk social engineering broke “any MFA is fine.” The 2026 question is which MFA survives an attacker who can relay codes and spam approvals so we scored ten leading solutions against a weighted rubric that puts phishing resistance first. Microsoft Entra MFA takes #1 on the strength of bundled economics […]

The post Top 10 Best Multi-Factor Authentication (MFA) Solutions in 2026 [Ranked & Scored] appeared first on Cyber Security News.