Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Unverified shown Topic: Malware Clear all filters
↑
  1. Reported 70Malware
    Published 4 Nov 2026, 16:24 UTC

    Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet

    Source: Dark Reading
    Vendor Google
  2. Unverified 30Malware
    Published 4 Nov 2026, 15:27 UTC

    Chinese Botnet (XCPE on Android) Broken

    Source: r/netsec
    Vendor Google
  3. Reported 60Malware
    Published 4 Nov 2026, 09:55 UTC

    SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

    Source: ESET WeLiveSecurity
  4. Reported 70Malware
    Published 3 Nov 2026, 15:16 UTC

    cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

    Source: The Hacker News
    Impact Everyday lifeVendor Linux
  5. Reported 60Malware
    Published 3 Nov 2026, 14:11 UTC

    A hidden backdoor put 1.3 million TV boxes to work for criminals

    Source: Malwarebytes Labs
  6. Reported 60Malware
    Published 3 Nov 2026, 09:50 UTC

    Gorbag: Orcs at the border harvesting intelligence from Ukraine

    Source: ESET WeLiveSecurity
    Country Ukraine
  7. Reported 70Malware
    Published 3 Nov 2026, 05:34 UTC

    Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

    Source: The Hacker News
    Vendor Siemens
    CVE-2026-58115
  8. Reported 70Malware
    Published 3 Nov 2026, 02:24 UTC

    Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

    Source: Krebs on Security
  9. Reported 70Malware
    Published 2 Nov 2026, 22:55 UTC

    Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

    Source: The Register (Security)
    Vendor Linux
  10. Reported 70Malware
    Published 2 Nov 2026, 19:03 UTC

    Cops bust botnet of 1.3M infected Android TV boxes

    Source: The Register (Security)
    Vendor Google
  11. Reported 70Malware
    Published 2 Nov 2026, 15:50 UTC

    Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

    Source: The Hacker News
    Vendor Google
  12. Unverified 30Malware
    Published 2 Nov 2026, 09:43 UTC

    Securing Internet-Critical Software: How We Could Have Backdoored Bash

    Source: r/netsec
  13. Reported 70Malware
    Published 1 Nov 2026, 07:02 UTC

    NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection

    Source: The Hacker News
    Vendor Microsoft
  14. Reported 70Malware
    Published 31 Oct 2026, 12:00 UTC

    Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims

    Source: WIRED Security
  15. Reported 60Malware
    Published 31 Oct 2026, 12:00 UTC

    Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer

    Source: Cisco Talos
  16. Reported 60Malware
    Published 31 Oct 2026, 01:02 UTC

    Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

    Source: Microsoft Security Blog
  17. Reported 70Malware
    Published 30 Oct 2026, 20:38 UTC

    A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

    Source: WIRED Security
  18. Corroborated 75Malware
    Published 30 Oct 2026, 08:55 UTCUpdated 5 days ago

    Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor

    2 sources: The Hacker News, Dark Reading
  19. Reported 70Malware
    Published 29 Oct 2026, 10:30 UTC

    A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards

    Source: WIRED Security
  20. Reported 60Malware
    Published 29 Oct 2026, 08:00 UTC

    Amatera: How the prolific infostealer works and spreads

    Source: ESET WeLiveSecurity
  21. Reported 70Malware
    Published 27 Oct 2026, 16:47 UTC

    'Aokigahara' Stealer Targets 'Developer Keyrings' & AI Assistants

    Source: Dark Reading
  22. Reported 70Malware
    Published 26 Oct 2026, 22:29 UTC

    Worm armed 42 GitHub repos by hiding a payload too big to fail

    Source: The Register (Security)
    Vendor GitHub
  23. Reported 60Malware
    Published 23 Oct 2026, 13:00 UTC

    Infostealer riding the AI Train

    Source: Check Point Research
    Impact Everyday life
  24. Reported 60Malware
    Published 22 Oct 2026, 08:45 UTC

    MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

    Source: ESET WeLiveSecurity