Despite a global scramble to patch the critical Log4j zero-day vulnerability discovered over two years ago, it remains a persistent threat. Complex software dependencies hinder comprehensive patching, allowing nation-state actors and cybercriminal groups to exploit unpatched systems. In a recent campaign, attackers deployed cryptocurrency miners and installed malicious backdoor scripts to control compromised systems. This highlights the challenge of eradicating longstanding unpatched vulnerabilities.

Vidar & StealC 2.0 Released by Threat Actors With a Complete New Build
Cybersecurity experts have identified major updates to two prominent info-stealers, Vidar and StealC, that feature enhanced capabilities and up-to-date user interfaces. Intriguingly, both versions incorporate