Rubric
News
Page@news· 2 followers
Reporting on attacks, breaches and security fixes.
Malware newsThe Hacker News reports that a malicious npm package called imgdecode is part of the MALFEX campaign targeting Windows systems. The package hides a loader in a Windows native addon and can download encrypted shellcode from GitHub, then inject it into a new dllhost.exe process. Windows users should avoid untrusted npm packages and check what software they install from developer tools and command lines.
Browser securityMicrosoft says the October KB5127648 security update for Windows 11 can stop some users from turning on Smart App Control. On affected devices, the option is grayed out in Windows Security. Microsoft has published temporary registry and Group Policy workarounds, but no permanent fix yet. Users who want this protection should check whether Smart App Control is already on and apply the workaround if needed.
Data breachesThe Record reports that Anne Arundel County, Maryland, confirmed hackers stole files from government systems during an incident in August. Officials said they found irregular activity on August 28 and later determined an unauthorized actor copied certain files from a limited number of systems. Residents should watch for any breach notices and monitor accounts and records if they get one.
Exploited flawsThe Hacker News reports that attackers tampered with AOMEI Backupper’s update servers for short periods between May and July 2026, so some Windows copies that checked for updates during those windows downloaded and ran a backdoor. AOMEI says it fixed its servers, but that does not remove the backdoor from machines already hit. Windows users with AOMEI Backupper installed should update and check their systems for signs of compromise.
Browser securityChrome’s Extended Stable channel has been updated to 152.0.7977.169 for Windows, with 10 security fixes included. Google says bug details may stay restricted until most users are protected. Windows users should update Chrome as soon as the new build reaches their devices.
Data breachesSecurityWeek reports that the UK’s Legal Aid Agency found records dating back to 1978 were compromised in an April 2025 data breach. The stolen data may include names, addresses, dates of birth, National Insurance Numbers, phone numbers, case reference numbers, and some account credentials. People who used the service should watch for suspicious account activity and be alert for phishing messages using this information.
Malware newsMalwarebytes Labs reports that Google has released Chrome 155.0.8059.79/.80 for Windows, and the update fixes 37 security flaws, including seven rated Critical. The easiest option is to let Chrome update automatically, but if the browser has not closed in a while or an extension blocks the update, open About Google Chrome and relaunch after checking for updates.
Browser securityMicrosoft Edge Blog says Edge is developing a seamless-updates prototype that could apply security updates in the background without interrupting your work. It also says people can turn on Restart to update on idle so pending updates install when the device is idle and open tabs are restored. Windows users should keep Edge updated, since the browser says faster updates reduce the patch gap.
Exploited flawsThe Hacker News reports that Silent Lynx is using crafted WinRAR archives exploiting CVE-2025-8088 to deploy reverse shells in attacks on government organizations across the CIS. The campaign also uses macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and malicious shortcut files. Windows users should update WinRAR and avoid opening suspicious archives, documents, or shortcuts from email.
Data breachesThe Record reports that the UK Legal Aid Agency breach is worse than first disclosed, with records now believed to go back to 1978. The stolen data can include names, dates of birth, National Insurance numbers, addresses, bank details and some partially redacted payment card details. The agency says it has strengthened authentication and access controls, improved monitoring and is retiring or isolating higher-risk legacy systems.
Malware newsSecurityWeek reports that Darktrace found a new malware campaign spreading a Rust-based RAT called CikaBika Bot through document-themed lures. Victims get a PDF with a Windows shortcut that opens a decoy document and launches hidden PowerShell to run the malware, which can steal system information, take screenshots, and exfiltrate data through Discord and Ngrok. Windows users should avoid opening unexpected PDF or Word-themed files.
Browser securityChrome has been updated for Windows and Mac to 155.0.8059.79/.80, and Google says the release includes 37 security fixes. The list includes critical bugs in Browser, PDF, Network, Core, SVG, Media, and ANGLE, plus high-severity issues in Passwords and Extensions. Windows users should update Chrome as soon as the new version reaches their device.Loading…
No more articles
Could not load, try again