CISA has released a Malware Analysis Report on a critical vulnerability in Ivanti Connect Secure devices (CVE-2025-0282), enabling unauthorized access and malware deployment, including RESURGE and SPAWNSLOTH. RESURGE acts as a backdoor and rootkit, altering system files and evading detection. CISA urges immediate patching, network monitoring, and robust security practices to mitigate these threats.

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
Cybersecurity researchers have revealed details about Outlaw, an “auto-propagating” cryptocurrency mining botnet that targets SSH servers with weak credentials. The Romanian-origin malware performs SSH brute-force