Malicious NuGet Package Impersonates Stripe Library to Steal API Keys CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20264 mins0 In February 2026, ReversingLabs researchers uncovered a malicious package published to the NuGet repository that was designed…continue reading..
New ClickFix Variants Exploit Windows Tools to Spread Malware CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20264 mins0 Over the last year, cybercriminals have increasingly used a trick called ClickFix to get people to run…continue reading..
Critical Flaw in Claude Code Exposes Developers to Remote Code Execution and API Key Theft (CVE-2025-59536) CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20264 mins0 Cybersecurity researchers from have uncovered serious vulnerabilities in Anthropic’s Claude Code — the AI-powered coding assistant —…continue reading..
Advanced PlugX Variant Uses DLL Side-Loading and In-Memory Execution in Recent Campaign CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20266 mins0 In January 2026, a new variant of the PlugX malware was used in targeted attacks. Based on…continue reading..
Vshell: Chinese-Language C2 Framework Emerges as Cobalt Strike Alternative in Active Threat Campaigns CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20266 mins0 Vshell is a remote administration tool written in Go that offers comprehensive post-compromise features such as network…continue reading..
Belarusian KGB Deploys “ResidentBat” Android Spyware in Targeted Physical Device Seizures CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20266 mins0 A newly documented Android spyware family called ResidentBat has been attributed to Belarus’s State Security Committee (KGB),…continue reading..
Threat Actor UAT-8616 Targets Enterprise Networks via SD-WAN Flaw CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20263 mins0 Cisco Talos reports that a highly sophisticated cyber threat actor, tracked as UAT-8616, is actively exploiting a…continue reading..
“Oblivion” Android RAT Sold for $300 Bypasses Major Phone Security, Targets Devices Running Android 8–16 CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20268 mins0 A powerful new Android Remote Access Trojan (RAT) called Oblivion has recently appeared, and cybersecurity researchers at…continue reading..
Microsoft Uncovers Developer-Targeted Campaign Using Malicious Next.js Repositories for C2 Operations CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20265 mins0 Microsoft Defender Experts and the Microsoft Defender Security Research Team have uncovered a coordinated cyber campaign that…continue reading..
Agent Tesla Campaign Uses File-Hosting Services and In-Memory Loaders to Evade Detection CyberSecurity News CyberDefenderFebruary 25, 2026February 25, 20268 mins0 Agent Tesla continues to be a dominant threat in the cyber landscape, due to its adaptability, simplicity…continue reading..
