Symantec and Carbon Black's threat hunters bring you the latest threat intelligence from the IT security world.
Joined July 2009
- Tweets16.5K
- Following365
- Followers115K
- Likes248
Pinned Tweet
Two critical #PHP flaws, CVE-2026-109618 and CVE-2026-109619 (#PHP2Shell), can let attackers take over web servers without logging in. Upgrade immediately to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart. security.com/threat-intellig…
#ThreatProtection #Sirius #Backdoor distributed under the FedEx disguise, read more about Symantec's protection: broadcom.com/support/securit… #malware
#ThreatProtection #Armorsteal #malware spread via SEO Poisoning campaigns, read more about Symantec's protection: broadcom.com/support/securit…
#ThreatProtection #PixyNetLoader distribution campaigns, read more about Symantec's protection: broadcom.com/support/securit… #malware
#ThreatProtection #RoofDeck and #FlatRoof #malware distributed in the latest campaign attributed to #TraderTraitor group, read more about Symantec's protection: broadcom.com/support/securit…
#ThreatProtection #uCreator Android Spyware, read more about Symantec's protection: broadcom.com/support/securit…
#ThreatProtection #ClingSTUN - a novel #backdoor targeting #Linux platform, read more about Symantec's protection: broadcom.com/support/securit…
#ThreatProtection Attackers are distributing packed Android droppers disguised as Japanese tax and retail apps to install the Black Hawk RAT. Read more about Symantec's protection: broadcom.com/support/securit…
Why #PHP2Shell is serious: no login needed, details are public, and a patched application on an unpatched #PHP runtime stays exposed. Find every PHP instance, including containers and appliances, and patch the runtime. security.com/threat-intellig…
#ThreatProtection #PHP2Shell - Critical vulnerabilities in PHP allow remote code execution through out-of-memory errors and stale global state. Read more: broadcom.com/support/securit…
#ThreatProtection BRONZE SANDCASTLE leverages DLL sideloading to deliver custom implant, read more about Symantec's coverage: broadcom.com/support/securit… #malware
To make hijacked #AI models comply, the operators layered a fake identity, a "devoted companion" persona, and a protocol telling the model to dismiss its own safety warnings. Our AI honeypot captured the campaign, dozens of offensive tools included. security.com/threat-intellig…
#NEW - Symantec researchers uncover autonomous offensive agent built to take over exposed #AIs and leverage them for further exploitation and profit, all at the expense of the model's owner. security.com/threat-intellig…
#ThreatProtection #ROMULUS #ClickFix platform delivers malicious payloads through social engineering techniques. Read more about Symantec's protection: broadcom.com/support/securit…
#ThreatProtection #QuartzLine Zenith #Backdoor, read more about Symantec's protection: broadcom.com/support/securit…
#NEW - Swallowtail (aka #APT28): Russian espionage group targets defense firms in two #NATO countries, including a naval shipbuilder, a military aircraft engine maker and a law enforcement agency. Read more: security.com/threat-intellig…
#ThreatProtection #GhostProfile #MacOS #malware, read more about Symantec's protection: broadcom.com/support/securit…
#ThreatProtection #KGB #RAT - a commodity malware sold as #Malware-as-a-Service, read more about Symantec's protection: broadcom.com/support/securit…
#ThreatProtection UAT-6275 targets organizations across the Commonwealth of Independent States, read more about Symantec's protection: broadcom.com/support/securit…
Aoki: #Infostealer Targets #AI Coding Assistant Credentials - Stolen API keys and tokens can allow attackers to carry out activity under a legitimate user's identity and API quota. Read more: security.com/threat-intellig…
