This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs, and more.

Set up fail2ban on Ubuntu with an nftables SSH jail, ignoreip allowlist, recidive bans, a custom filter and a health-check script in 12 steps.

Node.js heeft een patch uitgebracht voor een ernstige bug die het mogelijk maakte op afstand code uit te voeren. De kwetsbaarheid zat in compressielibrary Brotli. Het Nationaal Cyber Security Centrum ...

PHP2Shell attacks remain unsuccessful as researchers demonstrate an ASLR bypass enabling RCE on production-configured PHP systems.

China's Foreign Minister Wang Yi (C) looks on during a bilateral meeting with US Secretary of State Marco Rubio on the sidelines of the Association of Southeast Asian Nations (ASEAN) Foreign Ministers ...

The FBI and U.S. Justice Department have seized seven domains tied to Microscan and FishHub, two hacking tools allegedly operated by China-based Integrity Technology Group.

We have detected several campaigns using fake downloads of games, mods, cracks, and software to spread RenPy Loader. Once installed, the loader starts a complex, multi-stage infection chain that ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...

A Russian-speaking threat actor known as “bandcampro” used a jailbroken Gemini CLI, Google’s open-source terminal-based AI agent, to deploy and operate a small command-and-control (C2) botnet, ...

Threat actors have been abusing Valve’s Steam Workshop since late 2025, embedding malware inside Wallpaper Engine application wallpapers to hijack active Steam sessions and infect victims with ...

A botnet, a blend of “robot” and “network,” is a network of computers infected by malware and under the control of a single attacking party known as the “bot-herder.” Each infected machine, referred ...