Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Malware & Ransomware

Android Trojan Hijacks Hugging Face to Distribute RAT Payloads

Android Trojan Hijacks Hugging Face to Distribute RAT Payloads

Bitdefender researchers identified a new Android trojan that uses the Hugging Face platform—normally a repository for AI models—to host its remote‑access‑tool (RAT) payloads. The dropper retrieves the malicious APK from a seemingly benign model page, then contacts a command‑and‑control (C2) server whose infrastructure was

Vulnerabilities & Exploits

CrowdStrike’s Falcon Wins Gartner Customers’ Choice for External Attack Surface Management

CrowdStrike’s Falcon Wins Gartner Customers’ Choice for External Attack Surface Management

CrowdStrike’s Falcon platform has been named the exclusive Gartner Customers’ Choice for External Attack Surface Management (EASM). The award is based on real‑world feedback from verified Gartner customers who evaluated solutions on criteria such as discovery accuracy, prioritization of risk, and remediation effectiveness. Falcon’s win signals that

Malware & Ransomware

CrowdStrike Unveils Linux Sensor Techniques to Sniff Out Web‑Shell Persistence

CrowdStrike Unveils Linux Sensor Techniques to Sniff Out Web‑Shell Persistence

CrowdStrike’s recent blog details how its Falcon sensor on Linux platforms now correlates file‑system changes, process‑injection behavior, and anomalous network traffic to spot malicious web shells used by adversaries for long‑term footholds. By monitoring subtle indicators—such as rapid script modifications in web directories, unexpected parent‑

Malware & Ransomware

Bitdefender Finds Malicious Payloads Lurking in OpenClaw AI Skills

Bitdefender Finds Malicious Payloads Lurking in OpenClaw AI Skills

Bitdefender Labs conducted a systematic review of the OpenClaw AI skill marketplace and identified a rising tide of skills that hide malicious payloads within their scripts. The hidden code is designed to activate only after the skill is installed, allowing attackers to bypass conventional security checks and gain a foothold

Vulnerabilities & Exploits

CISA Flags Public Hacking Tools Seen in Recent Breaches

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory that catalogs dozens of publicly available hacking utilities identified in recent cyber incidents. The list spans credential dumpers, password‑spraying scripts, automated network scanners, ransomware loaders, and other open‑source frameworks that attackers are repurposing to breach organizations. The

Identity & Access Management (IAM)

Turn Cloud Logs into Threat Intel: Unit42’s New Detection Playbook

Turn Cloud Logs into Threat Intel: Unit42’s New Detection Playbook

Unit42’s latest research shows how defenders can repurpose native cloud logs—such as AWS CloudTrail and Azure Activity Logs—to surface the behavioral fingerprints of known adversary groups. By automatically correlating login anomalies, suspicious API calls, and lateral‑movement patterns across accounts and services, the methodology creates a “threat‑

Security Culture & Human Factors

AI Chat Previews Leak Malicious URL Contents, Exposing Sensitive Data

AI Chat Previews Leak Malicious URL Contents, Exposing Sensitive Data

AI agents built into popular messaging apps automatically generate link previews by fetching the target URL and extracting a snippet or title. A recent Register investigation showed that when users receive a malicious link, the preview reveals the actual content of the malicious page—sometimes even displaying embedded phishing forms

Vulnerabilities & Exploits

Shadow Campaigns: New Espionage Ops Exploit Hundreds of CVEs for Persistent Access

Shadow Campaigns: New Espionage Ops Exploit Hundreds of CVEs for Persistent Access

Unit42’s latest research uncovered a coordinated set of espionage operations, labeled “Shadow Campaigns,” that systematically abuse a broad spectrum of known software vulnerabilities—including dozens of high‑severity CVEs—across Windows, Linux, and network devices. The attackers chain these exploits to establish footholds, move laterally, and maintain long‑term