ZCyberNews — Cybersecurity & Tech Intelligence
Telegram Phishing Campaign Targets Exiled Belarusian Activist
Resident NGO uncovers a Telegram phishing campaign targeting an exiled Belarusian activist and users in Russia and Kazakhstan using individualized links and device fingerprinting.
See more updates →3 min read
Exposed WebDAV Malware Lab Reveals AI-Driven Delivery Pipeline
Rapid7 MDR found an exposed server with 1,048 artifacts — LNK lures, WebDAV scripts, CVE-2025-33053 tests — revealing attackers using generative AI to systematize malware delivery.
CVE-2023-36036
ModeloRAT Campaign Abuses Microsoft Teams for Enterprise Intrusion
Rapid7 dissects an April 2026 intrusion where a fake IT Support Teams message delivered ModeloRAT via Dropbox, leading to privilege escalation, credential theft, and lateral...
Read →More from today
See all →- 1wMalwareGoSerpent Backdoor Evolves in Targeted Attacks on Southeast Asian
- 1wThreat IntelHelloNet Campaign Hijacks ViPNet Update System to Deploy Malicious
- 1wMalwareOkoBot: New Sophisticated Malware Framework Targets Cryptocurrency
- 2wAI SecurityAI Crosses From Assistant to Operator in Live Attacks, Check Point
- 2wIndustry NewsCISA Postmortem Reveals GitHub Credential Leak Lasted Six Months
Threat Intel
HelloNet Campaign Hijacks ViPNet Update System to Deploy Malicious
Kaspersky details HelloNet APT campaign targeting Russian government, energy, and transport sectors via ViPNet update system DLL sideloading since May 2026.
Cavern Manticore: Iran-Linked Modular C2 Framework Exposed
Check Point Research tracks Cavern Manticore, an Iran MOIS-linked APT targeting Israeli govt and IT sectors with a modular .NET C2 framework.
ModeloRAT Campaign Abuses Microsoft Teams for Enterprise Intrusion
Rapid7 dissects an April 2026 intrusion where a fake IT Support Teams message delivered ModeloRAT via Dropbox, leading to privilege escalation, credential theft, and lateral...
Vulnerabilities
9.0
critical
CVE-2026-45408: Shell Injection in Dokku PaaS Lets Authenticated
CVE-2026-45408
9.8
critical
CVE-2019-25763: WordPress Beaver Builder Plugin Authentication Bypass
CVE-2019-25763
10.0
critical
CISA Adds Joomla JCE Flaw CVE-2026-48907 to KEV Catalog
CVE-2026-48907
Malware
Telegram
MALWARE
Telegram Phishing Campaign Targets Exiled Belarusian Activist
Jul 28 · HIGH
ClickFix
MALWARE
Exposed WebDAV Malware Lab Reveals AI-Driven Delivery Pipeline
Jul 21 · HIGH
GoSerpent
RAT
GoSerpent Backdoor Evolves in Targeted Attacks on Southeast Asian
Jul 17 · HIGH
Industry News
CISA Postmortem Reveals
CISA
CISA Postmortem Reveals GitHub Credential Leak Lasted Six Months
Jul 13 · HIGH
EU
NIS2
EU sues four member states over NIS2 cybersecurity law delays
Jul 10 · INFO
Latvian
RANSOMWARE
Latvian forestry firm still restoring systems weeks after ransomware
Jul 9 · INFO
Tools & Techniques
Metasploit Adds Vim Plugin Persistence, Exploits for Three CVEs
Rapid7's Metasploit Framework adds Vim plugin persistence, exploits for CVE-2025-6793 (Marvell QConvergeConsole), CVE-2024-48760 (GestioIP), and CVE-2023-30253 (Dolibarr).
Signal Adds In-App Warnings to Block Russian-Linked Phishing Attacks
Signal introduced new in-app confirmations and warnings to counter phishing attacks linked to Russian state hackers who abused the Linked Device feature to hijack high-profile...
Anthropic Launches Claude Security for AI-Driven Exploit Defense
Anthropic released Claude Security, a defensive AI suite to counter autonomous exploit tools like Mythos that weaponize zero-days in minutes. Targets enterprise SOCs.
AI Security
AI Security Report 2026
AI SECURITY
AI Crosses From Assistant to Operator in Live Attacks, Check Point
Jul 14 · INFO
Anthropic
PROVIDER
US lifts export controls on Anthropic's frontier cyber AI models
Jul 2 · INFO
Anthropic
AI SECURITY
Mythos AI Excels at Code Audits but Struggles With Exploit Validation
May 14 · INFORMATIONAL
Stay Updated
Get the latest cybersecurity news delivered to your inbox.