May 9, 2026 A highly sophisticated Brazilian banking trojan named TCLBANKER, tracked under the campaign REF3076, this malware represents a major update to the older Maverick and SORVEPOTEL families. It …
NVIDIA Data Breach Reportedly Exposes Personal Information of GeForce Users
May 9, 2026 A data breach at GFN.AM, an authorized NVIDIA GeForce NOW cloud gaming service provider operating under “GFN CLOUD INTERNET SERVICES” LLC, has exposed personal information belonging to …
Let’s Encrypt Halts Certificate Issuance After Cross-Signed Root Certificate Incident
May 9, 2026 Let’s Encrypt temporarily suspended all certificate issuance on May 8, 2026, after engineers identified a critical issue involving a cross-signed certificate linking the organization’s Generation X root …
Critical Microsoft 365 Copilot Vulnerabilities Expose sensitive Information
May 9, 2026 Microsoft has disclosed and fully remediated three critical information disclosure vulnerabilities affecting Microsoft 365 Copilot and Copilot Chat in Microsoft Edge, all released on May 7, 2026, …
New PamDOORa Backdoor Attacking Linux Systems to Steal SSH Credentials
A new backdoor called PamDOORa has emerged as a serious and growing threat to Linux systems, targeting one of the most trusted components of the operating system to silently steal …
Hackers Deploy Modular RAT With Credential Theft and Screenshot Capture Capabilities
May 8, 2026 A newly identified malware campaign is targeting senior executives and government investigators across Southeast Asia, using a modular Remote Access Trojan capable of stealing credentials, capturing screenshots, …
Škoda Security Incident Exposes Customers Data From Online Shop
May 8, 2026 Škoda Auto has disclosed a significant IT security incident affecting its official online shop, revealing that unauthorized individuals exploited a vulnerability in the platform’s standard shop software …
Hackers Use Fake OpenClaw Installer to Steal Crypto Wallet and Password Manager Credentials
May 8, 2026 A dangerous new infostealer campaign is targeting some of the most sensitive data people store on their computers. Disguised as a legitimate installer for OpenClaw, a popular …
New ZiChatBot Malware Uses Zulip REST APIs as Command and Control Server
May 8, 2026 A newly discovered malware called ZiChatBot has been found quietly using the REST APIs of a legitimate team chat application called Zulip to receive and carry out …
Trellix Breach – RansomHouse Claims Access to Parts of Source Code
May 8, 2026 Trellix, the global cybersecurity firm formed from the merger of McAfee Enterprise and FireEye, has confirmed unauthorized access to a portion of its source code repository, with …