SecurityWeek

Publication

0 followers

Cybersecurity news including government and critical infra.

RATs in the Machine: Inside a Pakistan-Linked Three-Pronged Cyber Assault on India

A newly released Aryaka report details a Pakistan‑attributed APT36 campaign that has launched a three‑pronged cyber assault on Indian government and defense entities. The operation employs three distinct Remote Access Trojans—GETA (a .NET Windows RAT), ARES (a Python‑based Linux RAT), and Desk (a Go‑based PowerPoint add‑in). All three rely on phishing‑borne payloads, living‑off‑the‑land binaries, and encrypted C2 channels to maintain stealthy, long‑term persistence for intelligence gathering.

Technology Pulse

SecurityWeek

Recent Posts

RATs in the Machine: Inside a Pakistan-Linked Three-Pronged Cyber Assault on India

New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android Devices

New ‘SSHStalker’ Linux Botnet Uses Old Techniques

Outtake Raises $40 Million to Bolster Digital Trust Against AI-Driven Threats

Cybersecurity M&A Roundup: 34 Deals Announced in January 2026

‘DKnife’ Implant Used by Chinese Threat Actor for Adversary-in-the-Middle Attacks

5 Bills to Boost Energy Sector Cyber Defenses Clear House Panel

Researchers Expose Network of 150 Cloned Law Firm Websites in AI-Powered Scam Campaign

VS Code Configs Expose GitHub Codespaces to Attacks

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries

Cisco, F5 Patch High-Severity Vulnerabilities

Critical React Native Vulnerability Exploited in the Wild

In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak

Aisy Launches Out of Stealth to Transform Vulnerability Management

Aisy Raises $2.3M Seed Round to Transform Vulnerability Management

Mitsubishi Electric Completes Acquisition of Nozomi Networks

High-Severity Remote Code Execution Vulnerability Patched in OpenSSL

Mesh Security Raises $12M Series A Led by Lobby Capital

Chrome, Edge Extensions Caught Stealing ChatGPT Sessions

Access System Flaws Enabled Hackers to Unlock Doors at Major European Firms

In Other News: €1.2B GDPR Fines, Net-NTLMv1 Rainbow Tables, Rockwell Security Notice

Organizations Warned of Exploited Zimbra Collaboration Vulnerability

The Upside Down Is Real: What Stranger Things Teaches Us About Modern Cybersecurity

Old Attack, New Speed: Researchers Optimize Page Cache Exploits

CyberNut Closes $5M Growth Capital for K-12 Security Awareness Training

AiFWall Emerges From Stealth With an AI Firewall

North Korean Hackers Target macOS Developers via Malicious VS Code Projects

Why Identity Security Must Move Beyond MFA

Cyber Insights 2026: API Security – Harder to Secure, Impossible to Ignore

Oracle’s First 2026 CPU Delivers 337 New Security Patches

‘SolyxImmortal’ Information Stealer Emerges

Cyber Insights 2026: Information Sharing

Cybersecurity Firms React to China’s Reported Software Ban

New StackWarp Attack Threatens Confidential VMs on AMD Processors

Vibe Coding Tested: AI Agents Nail SQLi but Fail Miserably on Security Controls

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Aveva, Phoenix Contact

RedVDS Cybercrime Service Disrupted by Microsoft and Law Enforcement

Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits

After Goldman, JPMorgan Discloses Law Firm Data Breach

Hackers Accessed University of Hawaii Cancer Center Patient Data; They Weren’t Immediately Notified

Tim Kosiba Named NSA Deputy Director

FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes

CrowdStrike to Buy Identity Security Firm SGNL for $740 Million in Cash

Researchers Expose WHILL Wheelchair Safety Risks via Remote Hacking

The Loudest Voices in Security Often Have the Least to Lose

Technology Pulse

SecurityWeek

Recent Posts

RATs in the Machine: Inside a Pakistan-Linked Three-Pronged Cyber Assault on India

New ‘ZeroDayRAT’ Spyware Kit Enables Total Compromise of iOS, Android Devices

New ‘SSHStalker’ Linux Botnet Uses Old Techniques

Outtake Raises $40 Million to Bolster Digital Trust Against AI-Driven Threats

Cybersecurity M&A Roundup: 34 Deals Announced in January 2026

‘DKnife’ Implant Used by Chinese Threat Actor for Adversary-in-the-Middle Attacks

5 Bills to Boost Energy Sector Cyber Defenses Clear House Panel

Researchers Expose Network of 150 Cloned Law Firm Websites in AI-Powered Scam Campaign

VS Code Configs Expose GitHub Codespaces to Attacks

Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries

Cisco, F5 Patch High-Severity Vulnerabilities

Critical React Native Vulnerability Exploited in the Wild

In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak

Aisy Launches Out of Stealth to Transform Vulnerability Management

Aisy Raises $2.3M Seed Round to Transform Vulnerability Management

Mitsubishi Electric Completes Acquisition of Nozomi Networks

High-Severity Remote Code Execution Vulnerability Patched in OpenSSL

Mesh Security Raises $12M Series A Led by Lobby Capital

Chrome, Edge Extensions Caught Stealing ChatGPT Sessions

Access System Flaws Enabled Hackers to Unlock Doors at Major European Firms

In Other News: €1.2B GDPR Fines, Net-NTLMv1 Rainbow Tables, Rockwell Security Notice

Organizations Warned of Exploited Zimbra Collaboration Vulnerability

The Upside Down Is Real: What Stranger Things Teaches Us About Modern Cybersecurity

Old Attack, New Speed: Researchers Optimize Page Cache Exploits

CyberNut Closes $5M Growth Capital for K-12 Security Awareness Training

AiFWall Emerges From Stealth With an AI Firewall

North Korean Hackers Target macOS Developers via Malicious VS Code Projects

Why Identity Security Must Move Beyond MFA

Cyber Insights 2026: API Security – Harder to Secure, Impossible to Ignore