RMM Abuse Explodes as Hackers Ditch Malware
• RMM tools are increasingly used as primary attack vectors, replacing traditional malware. • Attackers leverage RMM’s remote access to maintain stealth and persistence. • RMM’s bu
Infosec
Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies
• AI assistants like Copilot and Grok can be hijacked as stealthy C2 proxies, blending into legitimate traffic. • Check Point researchers demonstrated the technique using anonymous
Password Managers Vulnerable to Vault Compromise Under Malicious Server
• ETH Zurich researchers tested zero‑knowledge password managers against fully malicious servers. • Bitwarden, Dashlane, LastPass, and 1Password were evaluated. • Attacks targeted
Please Don't Feed the Scattered Lapsus ShinyHunters
• Scattered Lapsus ShinyHunters (SLSH) uses harassment, threats, even swatting to extort firms. • They notify journalists and regulators, amplifying pressure beyond typical ransomw
Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088
• CVE-2025-8088: critical path traversal flaw in WinRAR allows arbitrary file writes via ADS. • Exploited by state-backed actors from Russia, China and financially motivated groups