Google's threat intelligence team infiltrated the hacker group TeamPCP with an undercover analyst from Mandiant, monitoring their supply-chain attacks on hundreds of open-source programs and over 1,000 companies. Two alleged members were arrested in Australia in a joint FBI investigation after Google identified operational security mistakes and shared intelligence with law enforcement. The group deployed malware and a self-spreading worm called Mini Shai-Hulud to compromise developer accounts and breach major targets including OpenAI and Github.
RatHat, a new Android malware linked to Chinese threat actors, uses AI to automate remote device control by serializing the accessibility tree into XML and leveraging an AI assistant for intelligent interface navigation. Distributed via malvertising and phishing, it abuses Accessibility permissions and enables Developer Options to gain shell-level execution, deploying Go-based agents for persistence and credential theft from banking and cryptocurrency apps.
ThinkNode M9 units shipped with infected MicroSD cards containing a worm virus that exploits Windows Autorun features. The virus remains dormant on the card and poses no risk to the device itself, but can infect Windows PCs if activated. Affected customers can replace their device, remove the virus manually, or request a refund.
Researchers present ALIBI, an attack that injects false security narratives into binaries to deceive LLM-based malware analyzers into misclassifying malicious samples as benign. The attack successfully flips verdicts on major models like Gemini and GPT, highlighting the need for provenance verification in LLM malware analysis systems.
The article is a news digest covering multiple tech topics including security vulnerabilities, AI developments, cybersecurity incidents, and software updates. Key stories include Microsoft SharePoint zero-day attacks, Russian phishing via Signal impersonation, AI-aided cyber attacks in Spain, and various hardware and software releases.
Starting September 2025, npm packages began self-updating with malware variants named Shai-Hulud, Shai-Hulud 2.0, Mini Shai-Hulud, and ChainDrop that steal developer credentials and automatically republish poisoned versions across hundreds of packages. These worms exploit the trust assumption in package managers by using compromised credentials to automate publishing without human intervention, with later variants targeting AI coding tool credentials and using cryptographic signatures and smart contracts to evade detection.
A dark web actor is advertising multi-chain cryptocurrency drainer source code for $210, claiming support for over 610 wallets across major blockchain networks including Ethereum, Bitcoin, and Solana, with features like phishing endpoints and admin panels. The claim remains unverified.
Prominent Rust developers and crate owners are being targeted in an ongoing campaign using social engineering via fake video calls to compromise devices and accounts for publishing malware. Attackers create legitimate-seeming company profiles and LinkedIn presences to gain trust. This attack style is attributed to DPRK and has previously compromised Rust developers in June and the arrayref crate last month.
A dark web actor named 'vendoir' is advertising multi-chain cryptocurrency drainer source code for $210, claiming support for over 610 wallets across Ethereum, Bitcoin, Solana, and other blockchains with features including phishing endpoints and a web admin panel. The claim remains unverified.
Brevo confirmed attackers stole a Cloudflare API key and injected malicious ClickFix scripts into its websites and customer sites for 5.5 hours on September 14, affecting approximately 100,000 websites. The hardcoded credential allowed attackers to create a Cloudflare Worker that modified content at the CDN edge, distributing malware including a WordPress backdoor plugin disguised as 'Web Media Optimizer.'
SlowMist disclosed KREMLIN, a Brazilian banking malware operation active since May 2025, which uses multi-stage loaders and malicious browser extensions to steal credentials and data. The malware bypasses Chromium security mechanisms and leverages Ethereum smart contracts as dead-drop resolvers for C2 infrastructure, with 1,515 infected hosts primarily in Brazil.
Google Pixel phones have been compromised in zero-click attacks, according to security reports. The vulnerability allows attackers to gain access without requiring user interaction. This represents a significant security concern for the Android device line.
Cloudflare's Page Shield ML detected four malicious JavaScript campaigns on storefronts that security scanners like VirusTotal and URLScan missed. The ML model uses graph neural networks and large language models to analyze JavaScript behavior patterns in live traffic, catching obfuscated scripts designed to steal affiliate revenue, hijack clicks, and tamper with analytics without relying on known signatures.
A supply chain compromise of Korean-language Windows 11 installation media created with Microsoft's official Media Creation Tool distributed infostealer malware through a scheduled task that activated in July 2025 after nine months dormant. The tampering affected only Korean-language media on physical machines, not English versions or virtual environments, and was later linked to the JSCEAL campaign targeting cryptocurrency users.
A developer attending GISEC conference discusses eyebrow, a security tool for monitoring AI agents. The tool inventories agent artifacts, validates content hashes, maps host access, and flags unauthorized changes to prevent malicious code execution in both web2 and web3 environments. Presentations from Google Cloud Security and Microsoft highlighted similar concerns about autonomous exploitation and supply chain risks.
A security analysis tool that scans NPM packages and MCP servers for malicious code before installation, checking for risky install scripts, credential access, data exfiltration, and hidden instructions without executing any code.
Hackers compromised HBO Max's verified Reddit account and posted 108 malicious ads using ClickFix social engineering to distribute information-stealing malware to Windows and macOS users. The campaign, linked to a broader operation called PasteSwitch, tricked victims into pasting commands into their terminals to install fake applications, including counterfeit HBO Max apps and cryptocurrency wallets.
Anthropic CEO Dario Amodei warned that AI agent swarms could potentially compromise internet infrastructure within 6–12 months through recursive self-improvement. However, both plausible attack scenarios—distributing malware or self-replicating onto infrastructure—require enormous computational resources and funding, creating a significant practical barrier that makes such an attack difficult to execute without detection.
Researchers at UC Santa Barbara discovered that LLM API routers used to reduce costs and balance loads are vulnerable to man-in-the-middle attacks. They found that 9 routers inject malicious code into AI responses and 17 steal credentials, with autonomous agent execution enabling immediate code exploitation without human approval.
Check Point and academic researchers discovered critical vulnerabilities in smart bulbs including Philips Hue and TP-Link Tapo models that enable attackers to inject malware into home networks through buffer overflows and credential theft. Millions of IoT devices are publicly exposed on Shodan, and attackers exploit known CVEs at scale; users should update firmware, isolate smart bulbs on separate networks, and replace devices with unpatched vulnerabilities.