Infosecurity Magazine

Attackers Exploit DVR Command Injection Flaw to Deploy Mirai-Based Botnet

FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices ...
CNET

The Age of Promptware: How AI Hacking Is Threatening the Smart Home, and What to Do

Prompt injections have become one of the biggest emerging threats to the modern home as AI adoption grows. It's a new era of malware -- and one that requires new defenses. Tyler Lacoma Editor / Home ...
Bleeping Computer

Hacker sneaks infostealer malware into early access Steam game

A threat actor called EncryptHub has compromised a game on Steam to distribute info-stealing malware to unsuspecting users downloading the title. A few days ago, the hacker (also tracked as Larva-208) ...
ZDNet

Third malware strain discovered in SolarWinds supply chain attack

Cyber-security firm CrowdStrike, one of the companies directly involved in investigating the SolarWinds supply chain attack, said today it identified a third malware strain directly involved in the ...
Bleeping Computer

Hackers use PHP exploit to backdoor Windows systems with new malware

Unknown attackers have deployed a newly discovered backdoor dubbed Msupedge on a university's Windows systems in Taiwan, likely by exploiting a recently patched PHP remote code execution vulnerability ...
GIGAZINE

The 'DarkSword' malware, an exploit capable of hacking hundreds of millions of iPhones, has been publicly leaked.

In March 2026, Google's threat intelligence group reported ' DarkSword,' an exploit that compromises iOS devices by taking advantage of multiple zero-day vulnerabilities. TechCrunch, an IT news site, ...
CSOonline

Hacking victim Bit9 blames SQL injection flaw

Bit9 said a common Web application vulnerability was responsible for allowing hackers to ironically use the security vendor’s systems as a launch pad for attacks on other organizations. Based in ...
CSOonline

APT group hits IIS web servers with deserialization flaws and memory-resident malware

A sophisticated, likely government-sponsored threat actor has been compromising major public and private organizations over the past year by exploiting deserialization flaws in public-facing ASP.NET ...