Posts of last few hours

MATCHBOIL’s evolution from a basic C# downloader into a more evasive implant supporting recurring command-and-control communication. Operated by UAC-0099, the malware now incorporates sandbox checks, commercial .NET obfuscation, deceptive interfaces, and revised persistence mechanisms, reflecting sustained development across samples spanning April 2024 through April 2026. Compilation timestamps suggest earlier development, although timestamps alone do not […]

The post MATCHBOIL Malware Adds Sandbox Checks, .NET Reactor Obfuscation and Persistent C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs reported. Despite this massive number, only two, CVE-2026-85880 and CVE-2026-81963, were reported Known Exploited and none were Publicly Disclosed. So for most of us, it’s still business as usual, patch systems at highest risk, but be prepared … More →

The post October 2026 Patch Tuesday forecast: Time for an Office cleanup appeared first on Help Net Security.

A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, VP of Rapid7 Intelligence, explains why its operators go after mail gateways and other edge devices that can’t run endpoint agents, and why a hacked telecom network can put a whole nation at risk. Beek also covers how … More →

The post What the BPFDoor backdoor tells us about attacks on the network edge appeared first on Help Net Security.