Linux rootkits are getting stealthier with eBPF and io_uring tricks
Linux rootkits are evolving. Security researchers at Elastic Security Labs say modern Linux malware no longer relies only on classic loadable kernel modules or simple…
FBI investigates cyber incident involving system tied to surveillance records
The FBI is investigating a cyber incident involving one of its internal systems that stores sensitive surveillance-related information. Public reporting says the affected environment included…
RMM tools keep IT running, but attackers now use them as stealthy entry points
Remote Monitoring and Management tools remain essential for modern IT teams. They help administrators patch systems, troubleshoot endpoints, and support distributed workforces from anywhere. But…
New ClickFix campaign uses Windows Terminal to launch Lumma Stealer
A new ClickFix campaign has shifted from the Windows Run box to Windows Terminal, giving attackers a more believable way to trick victims into launching…
OpenAI launches Codex Security to find, validate, and patch software vulnerabilities
OpenAI has launched Codex Security, a new application security agent that analyzes codebases, validates likely vulnerabilities, and suggests patches. The company says the product is…
Fake imToken Chrome extension caught stealing seed phrases and private keys
A malicious Chrome extension posing as an imToken tool has been caught redirecting users to a phishing site that steals crypto wallet seed phrases and…
Cognizant’s TriZetto breach grows to 3.4 million people, exposing sensitive health and insurance data
TriZetto Provider Solutions, a Cognizant-owned healthcare technology company, has disclosed that a cyberattack exposed the personal and health-related information of 3,433,965 people. The incident ranks…
China-linked hackers used TernDoor, PeerTime, and BruteEntry in telecom attacks across South America
A China-linked threat actor has targeted telecommunications providers in South America since 2024, using a multi-platform malware toolkit that hit Windows systems, Linux hosts, and…
CISA adds critical Hikvision and Rockwell Automation flaws to KEV catalog after active exploitation
The U.S. Cybersecurity and Infrastructure Security Agency has added two critical vulnerabilities affecting Hikvision and Rockwell Automation products to its Known Exploited Vulnerabilities catalog, confirming…
Anthropic says Claude Opus 4.6 helped uncover 22 Firefox vulnerabilities, and Mozilla has already patched them
Anthropic says its Claude Opus 4.6 model found 22 previously unknown vulnerabilities in Firefox during a two-week collaboration with Mozilla. Mozilla says all 22 security…
November 21, 2025
1 comment 
