Morning Overview on MSN

The FBI seized seven domains behind hacking tools that Integrity Technology Group supplied to China-linked hackers

Seven internet domains that carried a vulnerability scanner and a spear-phishing kit were redirected to FBI-controlled name ...
Security Boulevard

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor ...
StratNews Global

ClickFix Fake CAPTCHA Attack Hides Malware in Browser Cache

ClickFix Fake CAPTCHA Attack Tricks Users A new ClickFix fake CAPTCHA attack is turning routine web safety checks into a route for malware. Visitors to compromised websites are shown fake CAPTCHA or ...
Dark Reading

ClickFix Attacks Evolve to Better Hide Malicious Payloads

ClickFix attacks now hide payloads using DNS TXT records and browser cache pre-fetching, making it tougher to spot early ...
Infosecurity Magazine

ClickFix Attack Hides VBScript Payload in Browser Cache

A ClickFix campaign has been observed hiding a VBScript payload in the browser cache, disguised as an image, so the script was already on the device when the victim was tricked into running a command ...
cyberpress

New Windows Infostealer Targets 17 Browsers to Steal Passwords and Credit Cards

Security researchers have uncovered a Python-based Windows infostealer distributed through a suspicious nested archive. The ...
SC Media

2 new forms of malware exploited Citrix Netscaler devices one month before patch

Google report focuses on exploit of CVE-2026-88772, which executed lateral movement a month before a patch existed.
Tech Times

Citrix NetScaler Zero-Days Spread Mass Exploitation: Patching Won’t Remove Backdoors

Citrix NetScaler zero-day vulnerabilities CVE-2026-88771 and CVE-2026-88772 triggered mass internet exploitation within ...
SecurityWeek

Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks

Russian state-sponsored group Star Blizzard has been using the RedFlick infection technique in recent CosmicPulse attacks.
cloud

Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances

Exploitation of CVE-2026-88772 bypasses authentication and triggers an unhandled termination of the NetScaler Packet Processing Engine (NSPPE) to establish initial root-level access. Analysis of the ...
Cyber Security News

Python MaaS Infostealer Builder Steals Passwords, Credit Cards and Cookies From 17 Browsers

A Python-based malware builder can turn a single stealer into Windows programs for different operators. The tool packages a ...
Unite.AI

Cisco Talos Open-Sources CAIRN to Hunt AI-Integrated Malware

Cisco Talos on September 22, 2026 released CAIRN (Cognitive Artifact Intelligence Research Network), an open-source research toolkit for hunting, classifying, and tracking emerging AI-integrated ...