Malware & Threat Intel
Microsoft disclosed TerminalFix, a ClickFix variant that steers victims to Windows Terminal or PowerShell instead of the Run dialog, using fake Cloudflare CAPTCHAs to trigger a paste that ends in a reverse-tunnel backdoor. Here is what defenders should do.
Weekly Roundup
Our weekly wrap of the stories that did not get a standalone piece: an actively exploited Gitea RCE, Boston Scientific's global disruption, GPUThor's Rowhammer break, Chrome's 300-plus fixes, a 12.9M Carhartt breach, the NovaCookies phishing kit, and Trump's grid-equipment order.
Nation-State & Cybercrime
Cisco Talos published two reports on a Chinese-speaking cybercrime group, UAT-10147, that it says built agentic AI into its post-compromise operations, along with a companion cross-platform implant called SPECTRE. Here is what was disclosed, and what defenders should do about it.
Weekly Roundup
Our weekly wrap of stories that did not get a standalone piece: Iranian mega-theft charges, a pre-auth Citrix NetScaler bypass, Rapid7's record vulnerability quarter, fresh browser fixes, Grandoreiro in Mexico, an EDR-killing malware cocktail, and a no-filter AI service.