Elastic Security Labs has identified a new malware named SHELBY that targets Iraqi telecoms using a phishing attack. The malware has two components, SHELBYLOADER and SHELBYC2, that utilize GitHub commits for command-and-control operations, mimicking legitimate activity and complicating detection. SHELBY uses Personal Access Tokens (PATs) for unauthorized control over infected systems. Although the malware is still under development, it poses a significant security risk.

ACLU sues Trump administration over NIH grant cancellations
A coalition, represented by the ACLU, is suing the National Institutes of Health (NIH) over its cancellation of billions of dollars in research grants. The