Russian state-sponsored group Star Blizzard has been using the RedFlick infection technique in recent CosmicPulse attacks.

The Carbonato botnet compromises exposed Docker hosts, deploys an AI agent to steal AI API keys, and then spreads to other ...

CARBONATO is a Docker-based botnet that utilizes an autonomous AI agent as its command-and-control (C2) engine rather than a static server. Discovered by ThreatDown researchers in August 2026, this is ...

ShinyHunters seizes Clop’s leak site, CARBONATO botnet hunts AI keys on Docker hosts, and infostealer exposure in the US water sector.

The malware spreads automatically across reachable networks, while its operators use Telegram to direct activity on ...

Introductory ColumnYesterday's logs were hit by a storm of xmlrpc.php requests for the first time in a while.This file itself is not a web shell. It is an official file in WordPress. However, a ...

Explore the latest news, real-world incidents, expert analysis, and trends in Telegram — only on The Hacker News, the leading ...

Sality, a peer-to-peer (P2P) botnet that had been running for 23 years and infecting more than 15,000 machines worldwide, has been taken down in a joint operation by international law enforcement ...

The FBI has seized a series of domains that were used by a large-scale botnet to coordinate and launch China-backed cyberattacks against American targets. According to the Justice Department’s ...

Add Yahoo as a preferred source to see more of our stories on Google. The FBI has seized a series of domains that were used by a large-scale botnet to coordinate and launch China-backed cyberattacks ...

Explore the latest news, real-world incidents, expert analysis, and trends in PHP — only on The Hacker News, the leading ...

Aeternum is a new botnet loader designed to resist takedowns. It stores instructions on Polygon, a public blockchain, creating a widely replicated control channel that is difficult to remove. The ...