[Security] Techniques and Detection Methods for "Orphaned VBA Projects" Hidden within DWG Files ── SANS ISC Warns of Concealment Tactics Exploiting AutoCAD …

On October 14, 2026, the SANS Internet Storm Center (ISC) research team published a technical report on the structural ...

[AI: Security] ProjectDiscovery Warns of Backdoor Risks in Detection-Evasive "Abliterated Models" — The Terror of Open-Source AI Model Tampering Revealed v…

In mid-October 2026, ProjectDiscovery, known for its vulnerability scanning tools and security verification frameworks, ...
databricks.com

Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages

The set mirrors collected malware. Across the OSV-confirmed npm packages shipping a binary, formats are PE, ELF (all stripped ...
Security Boulevard

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor ...

Arcjet announces Arcjet Runtime Security for Coding Agents

Arcjet, the runtime security platform for AI agents, today introduced Arcjet Runtime Security for Coding Agents, extending its Agent Runtime Security platform to the coding tools developers use.
BIOENGINEER

Quantum-Inspired AI Reads Malware Like a Language to Catch Evolving Threats

Researchers have built a hybrid malware detection framework combining abstract syntax trees, L-moments, graph analysis, and quantum-inspired neural networks that achieved 98.62 percent accuracy on ...
Fox News

Android malware can steal your PIN and bank logins

Your Android phone probably holds far more sensitive information than you realize. Banking apps, passwords and security codes can all pass through that little screen ...

Russian state hackers use new RedFlick technique to push malware

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor.
Tech Times on MSN

Microsoft exposes China NeedyMantis spy tool: Year inside telecoms left theft scope unknown

NeedyMantis malware, linked to China-based threat actors, has silently infiltrated telecoms, universities, and government contractors for nearly a year. Microsoft published full technical analysis, ...
Tech Times

Cisco Talos Discloses Autonomous Windows Malware: Four AI Models Direct Each Attack

Autonomous AI malware CLOSEDQUORUM lets DeepSeek, Qwen, Mistral, and Gemini vote on attack decisions with no human operator, Cisco Talos disclosed September 22. The four-model plurality structure ...
scworld

New Exvicy malware-as-a-service framework copies rival’s code

According to Infosecurity Magazine, a new malware-as-a-service (MaaS) framework named Exvicy has emerged, built using code stolen from a competing service called ErrTraffic. Exvicy operates as a ...
Fox News

AI malware can rewrite itself to evade detection

Google's Threat Intelligence Group found experimental malware called PROMPTFLUX that could ask Gemini to rewrite its own code. One version was designed to do that every hour. Why would malware keep ...