PDFly Variant Uses Custom PyInstaller Tweaks to Obfuscate Payload, Thwarting Analysis
04
Feb
2026

PDFly Variant Uses Custom PyInstaller Tweaks to Obfuscate Payload, Thwarting Analysis

A new malware variant dubbed “PDFly” is abusing a heavily modified PyInstaller stub to hide its Python bytecode, forcing analysts…

Derek B. Johnson
04
Feb
2026

Cantwell claims telecoms blocked release of Salt Typhoon report 

More than a year after national security officials revealed that Chinese hackers had systematically infiltrated U.S. telecommunications networks, the top…

Fake Compliance Emails Weaponize Word and PDF Attachments to Steal Sensitive Data
04
Feb
2026

Fake Compliance Emails Weaponize Word and PDF Attachments to Steal Sensitive Data

A newly observed phishing campaign is abusing fake “audit/compliance confirmation” emails to target macOS users and steal highly sensitive data….

Fake Dropbox Phishing Campaign Targets Users, Steals Login Credentials
04
Feb
2026

Fake Dropbox Phishing Campaign Targets Users, Steals Login Credentials

A sophisticated phishing campaign that uses a multi-stage approach to bypass email filtering and content-scanning systems. The attack exploits trusted…

04
Feb
2026

Ivanti’s EPMM is under active attack, thanks to two critical zero-days

Attackers are again focusing on a familiar target in the network edge space, actively exploiting two critical zero-day vulnerabilities in…

Step Finance says compromised execs
04
Feb
2026

Step Finance says compromised execs’ devices led to $40M crypto theft

Step Finance announced that it lost $40 million worth of digital assets after hackers compromised devices belonging to the company’s…

Infostealer Attacks Hit macOS, Abusing Python and Trusted Platforms
04
Feb
2026

Infostealer Attacks Hit macOS, Abusing Python and Trusted Platforms

A sharp rise in campaigns targeting macOS users, while attackers also ramp up Python‑based stealers and abuse trusted platforms like…

report-ad-banner
04
Feb
2026

French Police Raid X Offices As Grok Investigations Grow

French police raided the offices of the X social media platform today as European investigations grew into nonconsensual sexual deepfakes…

U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
04
Feb
2026

U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February…

AI-ISAC inches forward under Trump administration
04
Feb
2026

AI-ISAC inches forward under Trump administration

Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. WASHINGTON — The…

power plant, energy infrastructure, industrial control systems
04
Feb
2026

What’s next for DHS’s forthcoming replacement critical infrastructure protection panel, AI information sharing

A revised government-industry council devoted to critical infrastructure protection could be set up to have broader and more specific discussions…

GlassWorm Infiltrates VSX Extensions With 22,000+ Downloads to Target Developers
04
Feb
2026

GlassWorm Infiltrates VSX Extensions With 22,000+ Downloads to Target Developers

A new GlassWorm-linked supply chain attack abusing the Open VSX Registry, this time via a suspected compromise of a legitimate…