Hackers used AI-assisted scripts to steal Linux passwords by tampering with shell files, maintain access and target sensitive data.
MITRE ATT&CK v20 expands critical infrastructure installations threat coverage with new IT and OT attack techniques.
BeyondTrust patches CVE-2026-102764, a Remote Support zero-day China-linked ARMORY CASTLE used to deploy SAWFLY and BARECLAW malware.
ROMULUS platform uses ClickFix traps, PowerShell scripts and fake installers to deliver malware and infect Windows systems.