https://opensourcemalware.com/blog/introducing-weaselbiscuit#new_tab 2026-09-18T19:14:47Z Security Risk Advisors en 🚩 WeaselBiscuit Infostealer Found in npm Packages With Suspected DPRK Links 2026-09-18T19:14:47Z Blog https://www.air.security/blog-posts/plugin4shell#new_tab 2026-09-18T19:13:38Z Security Risk Advisors en Plugin4Shell SHA Pinning Bypass Enables Zero Click RCE Across Major AI Coding Agents 2026-09-18T19:13:38Z Blog https://www.huntress.com/blog/new-settra-ransomware-variant#new_tab 2026-09-18T19:12:19Z Security Risk Advisors en 🚩 Settra ransomware deploys MeshAgent for persistent access before encrypting systems and disrupting Windows recovery. 2026-09-18T19:12:19Z Blog https://www.zscaler.com/blogs/security-research/operation-rapidrust-apt36-deploys-rustyshade-rustymove-psnatch-and#new_tab 2026-09-17T18:50:16Z Security Risk Advisors en 🚩 APT36 deploys new Rust-based malware and file-stealing tools to target government and defense organizations and reach air-gapped networks. 2026-09-17T18:50:16Z Blog https://www.cisa.gov/sites/default/files/2026-09/using-cyber-decoys-to-strengthen-detection-and-response_508c.pdf#new_tab 2026-09-17T18:49:23Z Security Risk Advisors en CISA Releases Cyber Decoy Guidance to Improve Detection of Lateral Movement and Living-Off-the-Land Activity 2026-09-17T18:49:23Z Blog https://securelist.com/tr/nighteagle-apt-ghostcontainer-and-tunneling/121323/#new_tab 2026-09-17T18:48:09Z Security Risk Advisors en 🚩 NightEagle APT Expands to Russian Targets Using GhostContainer Backdoor and RDP Tunneling 2026-09-17T18:48:09Z Blog