The WailingCrab malware has evolved to increase its stealth and detection evasion by using MQTT protocol, which is not commonly used by malware and can easily blend into legitimate IoT traffic. The malware, delivered via spam campaigns and hosted on Discord, has a loader, injector, downloader, and backdoor components. Security precautions such as up-to-date antivirus software, patching, and added surveillance on MQTT protocol use are recommended to keep this sophisticated malware at bay.

Oracle Cloud leak leads CISA to issue warning about credential risks
The Cybersecurity and Infrastructure Security Agency (CISA) has issued guidance on mitigating credential risks following a potential compromise of a legacy Oracle cloud environment. The