-
3 days ago | 
scworld.com | Laura French
The open-source Chaos Remote Administration Tool (RAT) continues to be used in cyberattacks with new variants discovered by the Acronis Threat Research Unit (TRU), the cybersecurity company reported Wednesday. Chaos RAT, available on GitHub, enables users to control remote Windows and Linux systems via a reverse shell and perform tasks, including file management and command execution.
-
4 days ago | 
scworld.com | Laura French
The Android banking trojan Crocodilus, which hijacks accessibility features for remote access and control, has spread globally and gained new features since its discovery in March 2025, according to Threat Fabric. Crocodilus initially targeted victims in Turkey, where it is believed to have originated, and has expanded its reach to South America, the United States, parts of Asia and the rest of Europe.
-
5 days ago | 
scworld.com | Laura French
A cryptojacking campaign is targeting DevOps web servers of Docker, HashiCorp Nomad, HashiCorp Consul and Gitea, the Wiz Threat Research team reported Monday. The attackers, tracked as JINX-0132, leveraged misconfigurations or vulnerabilities that leave DevOps servers internet-exposed and susceptible to malicious deployment of the open-source XMRig cryptomining software.
-
1 week ago | 
scworld.com | Laura French
A new Rust-based infostealer dubbed EDDIESTEALER is being spread via the popular ClickFix social engineering technique, which uses fake CAPTCHAs to fool users, Elastic Security Labs reported Thursday. EDDIESTEALER evades analysis through the use of various obfuscation techniques including XOR string encryption, stripping of function symbols, and a custom API lookup mechanism.
-
1 week ago | 
scworld.com | Laura French
CISOs at large organizations are making up to $1.1 million on average, but they report high levels of dissatisfaction with budget, compensation and board visibility, according to a new report from IANS and Artico Search. "The 2025 Compensation and Budget for CISOs in Large Enterprises" report offered insights from a survey of more than 400 CISOs from organizations with annual revenues of $1 billion or more.
-
1 week ago | 
scworld.com | Laura French
Thousands of ASUS routers have been compromised with malware-free backdoors in an ongoing campaign to potentially build a future botnet, GreyNoise reported Wednesday. The threat actors abuse security vulnerabilities and legitimate router features to establish persistent access without the use of malware, and these backdoors survive both reboots and firmware updates, making them difficult to remove.
-
1 week ago | 
scworld.com | Laura French
Fake AI video generation websites promoted via Facebook and LinkedIn ads were found to spread various malware payloads with reconnaissance and backdoor capabilities, according to Mandiant. The campaign has been ongoing since at least mid-2024 and is tied to more than 30 websites imitating popular legitimate AI tools like Luma AI, Kling AI and Canva Dream Lab, the cybersecurity company said in a blog post Tuesday.
-
2 weeks ago | 
scworld.com | Laura French
Organizations, especially those in government and critical infrastructure, using artificial intelligence in day-to-day operations have a new resource to turn to ensure the security and integrity of data used by AI systems. The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency’s Artificial Intelligence Security Center (NSA AISC), Federal Bureau of Investigation (FBI) and international partners released new guidance for AI data security best practices on Thursday.
-
2 weeks ago | 
scworld.com | Laura French
Chinese-speaking threat actors are suspected to have exploited a Trimble Cityworks zero-day vulnerability to deploy backdoors against local government entities in the United States, Cisco Talos reported Thursday. The Cityworks flaw, tracked as CVE-2025-0994, was the subject of a Cybersecurity and Infrastructure Security Agency (CISA) advisory in February due to active exploitation. Cityworks is an asset and work management system designed for public infrastructure organizations.
-
2 weeks ago | 
scworld.com | Laura French
The National Institute of Standards and Technology (NIST) published a new 2025 version of its adversarial AI taxonomy, first published in January 2024. The latest version of “Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations,” released Tuesday, supplies significant updates, including expanded sections on generative AI (GenAI) and key challenges, and a standardized index for more efficient navigation and referencing.
