Cyber Attacks
Fake Web3 Accelerator Distributes Malicious npm Packages to Steal Data
Threat actors posing as an accelerator used free AI credits to lure crypto founders into installing macOS backdoors and Windows stealers via fraudulent packages.
GBHackers
Everything Threat Times has reported about GBHackers: 10 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
AnyDesk Linux Patch Fixes Remote Root Code Execution Flaw
AnyDesk released version 8.0.3 to address a heap buffer overflow in Linux builds that allowed attackers to gain root access before user approval.
Vulnerabilities
Discourse CVE-2026-55420 Allows Low-Privilege Users to Read Server Files
A race condition in Discourse’s image upload pipeline enables arbitrary file access for Trust Level 0 users via crafted uploads.
Malware & Ransomware
WhatsApp Malware Chain Injects Code Into Windows Task Scheduler for SYSTEM Access
A financial document lure delivered via WhatsApp deploys malware that hijacks the Windows Task Scheduler to execute payloads with LocalSystem privileges, bypassing standard security checks.
Malware & Ransomware
Casbaneiro Trojan Targets Latin America With Conditional C2 Activation
August 2026 campaign uses geofencing and language checks to hide banking theft until victims visit targeted financial sites, evading sandbox analysis.
Tech News
Microsoft Teams to Scan QR Codes in Messages for Malicious URLs Starting in 2026
A new Teams feature will extract and check web addresses hidden in QR codes, extending Defender protections to detect threats after message delivery.
Cyber Attacks
Researchers Detail AgentCorruption Attack Chain in AWS Bedrock AgentCore
A new attack chain dubbed AgentCorruption allows attackers to hijack AI agents via a single prompt, leading to credential theft and lateral movement within AWS accounts.
Vulnerabilities
Hackers Use AI Agents and GodPotato to Escalate Windows Privileges
Attackers leveraged large language model agents and a known privilege escalation exploit to seize full system control without deploying new malware.
Cyber Attacks
DarkBlinders Hackers Deploy Fake Meeting App to Steal Government Data in Israel and Iraq
Researchers link a fake video conferencing tool and abused GitHub repositories to a cyberespionage campaign targeting government entities in Israel and the Kurdistan Region of Iraq.
Threat Intelligence
Iranian Infrastructure Generates 40 Billion DNS Observations During Conflict
A surge in suspected Iranian VPN-over-DNS activity produced 40 billion passive DNS observations across 100 domains, according to a report published October 9, 2026.