Two Rust backdoors for Apple Silicon sat dormant on a developer's Mac for eleven days.
Gen Digital says a China-linked crew used a Sogou input method flaw to plant the GRAYRABBIT backdoor on Windows machines.
SOCRadar details PEEP, a post-compromise toolkit that rides a fake bookmarks extension from the browser out to host-level command execution.
An unpatched flaw named StyleSmuggler is letting attackers backdoor Magento and Adobe Commerce stores with no login.
Rapid7 finds a North Korea-linked toolkit hiding inside trojanized HAProxy builds at two South Korean firms.
Sygnia traces the China-nexus group beyond VMware to routers, TACACS servers, and management hosts.
VulnCheck found two factory implants in ZBT router firmware that give unauthenticated attackers root access.
Recorded Future ties a new batch-script backdoor to Russia's BlueDelta espionage group.