Search: "Malware" — The Circuitry

AAPL
MSFT
GOOGL
META
NVDA
TSLA
AMZN
INTC
SONY
TTWO
COIN
BTC
ETH
SOL

FeedLIVE

David Ellison said AI will significantly reshape Paramount Skydance's business, and that the company has been developing its own AI tools. He said content will be easier to produce and projects will speed up.

BriefSource ↗7m

Google says Antigravity now has a Knowledge Work layout for research, documents, and other non-code work. The Software Engineering layout stays the default for existing users.

BriefSource ↗22m

SpaceX's launches page lists USSF-627 on a Falcon 9 from California, landing on a droneship. The window runs from 10:49 p.m. AST on November 10 to 2:49 a.m. AST on November 11.

Open the Feed →

Open the full feed →

NEWS →8 STORIES

TechVERIFIEDOct 19

Researchers say hackers hijacked AOMEI update servers to spread malware

via bleepingcomputer.com

TechVERIFIEDOct 19

Rank Math PRO plugin downloads carried malware that could backdoor WordPress sites

via rankmath.com

TechVERIFIEDAug 4

01/09

Support The Circuitry

Reader-funded, ad-light. If our coverage is useful, buy us a coffee.

Buy me a coffee

MOMENTUM

Loading…

Results for "Malware"

8 total

VERIFIEDBy Xavier Rivera·Tech·Oct 19·via bleepingcomputer.com·1 min read

Researchers say hackers hijacked AOMEI update servers to spread malware

Researchers from ManageEngine and Google say attackers tampered with AOMEI's update and notification configuration files in three short windows, delivering the CROSSROAD downloader and SHINYROAD backdoor through AOMEI Backupper. AOMEI says its CTO is leading an investigation.

Read

VERIFIEDBy Xavier Rivera·Tech·Oct 19·via rankmath.com·1 min read

Rank Math PRO plugin downloads carried malware that could backdoor WordPress sites

Rank Math says a limited number of users who downloaded Rank Math PRO 3.0.123 between October 15 at 20:02 UTC and October 16 at 07:12 UTC received files containing malware. The free WordPress.org version was not affected, and a clean 3.0.124 is available.

Read

VERIFIEDBy Xavier Rivera·Tech·Aug 4·via BleepingComputer·2.5 min read

ChainDrop worm compromises over 1,300 npm packages totaling 2 billion downloads

ChainDrop, a self-propagating worm, has compromised more than 1,300 npm packages responsible for 2 billion combined monthly downloads, including Keyv, Cacheable and utilities tied to Deliveroo, Picsart, Qlik and others. The malware steals a broad array of developer and cloud credentials from infected systems and CI/CD environments, requiring any impacted machine to be treated as fully breached.

Read

VERIFIEDBy Xavier Rivera·Tech·Jul 9·via The Register·1.5 min read

Microsoft patches Nightmare Eclipse's RoguePlanet Defender zero-day

Microsoft has fixed the RoguePlanet zero-day in Defender via an update to the Malware Protection Engine. The patch closes the latest vulnerability publicly disclosed by researcher Nightmare Eclipse, who has sparred with the company over its handling of bug reports all year.

Read

VERIFIEDBy Xavier Rivera·Tech·Jun 18·via Apple Newsroom·2.5 min read

Apple revises iOS rules in Brazil after regulator pact

Apple has introduced iOS modifications in Brazil that open authorized alternative marketplaces and external payment tools under a CADE agreement while adding Notarization plus child-safety rules. The steps target newly created malware, fraud, and privacy hazards on the platform Apple still calls the most secure mobile option locally.

Read

VERIFIEDBy Xavier Rivera·Tech·Jun 15·via BleepingComputer·1.5 min read

China-linked UNC6508 deploys InfiniteRed malware on exposed REDCap servers

Google Threat Intelligence Group linked China-associated actor UNC6508 to a campaign that breached REDCap servers at a North American medical research organization in September 2023. The group deployed custom InfiniteRed malware three months later and maintained access until November 2025, exfiltrating targeted data through a novel email-based method using content compliance rules.

Read

VERIFIEDBy Xavier Rivera·Tech·May 12·via Decrypt·2 min read

Microsoft Uncovers Malware in Mistral AI PyPI Package

Microsoft Threat Intelligence reported that attackers inserted malicious code into a Mistral AI package on PyPI, which steals credentials from Linux systems as part of the Shai-Hulud campaign. The supply chain compromise tied to a TanStack incident highlights ongoing risks to developer tools on PyPI and NPM repositories.

Read

VERIFIEDBy Xavier Rivera·Tech·May 3·via BleepingComputer·1 min read

Defender Falsely Flags DigiCert Root Certs as Malware

Microsoft Defender wrongly flags legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha, causing false alerts and trust store removals after an April 30 update. Microsoft has fixed it in the latest security intelligence update amid a recent DigiCert breach that exposed code-signing certificates to attackers.

Read

Researchers say hackers hijacked AOMEI update servers to spread malware

Rank Math PRO plugin downloads carried malware that could backdoor WordPress sites

ChainDrop worm compromises over 1,300 npm packages totaling 2 billion downloads

Microsoft patches Nightmare Eclipse's RoguePlanet Defender zero-day

Apple revises iOS rules in Brazil after regulator pact

China-linked UNC6508 deploys InfiniteRed malware on exposed REDCap servers

Microsoft Uncovers Malware in Mistral AI PyPI Package

Defender Falsely Flags DigiCert Root Certs as Malware

Results for "Malware"

Researchers say hackers hijacked AOMEI update servers to spread malware

Rank Math PRO plugin downloads carried malware that could backdoor WordPress sites

ChainDrop worm compromises over 1,300 npm packages totaling 2 billion downloads

Microsoft patches Nightmare Eclipse's RoguePlanet Defender zero-day

Apple revises iOS rules in Brazil after regulator pact

China-linked UNC6508 deploys InfiniteRed malware on exposed REDCap servers

Microsoft Uncovers Malware in Mistral AI PyPI Package

Defender Falsely Flags DigiCert Root Certs as Malware

Microsoft Ignite 2026

AWS re:Invent 2026

The Game Awards 2026

The Circuitry: verified tech, gaming, markets and energy news

Researchers say hackers hijacked AOMEI update servers to spread malware

Rank Math PRO plugin downloads carried malware that could backdoor WordPress sites

ChainDrop worm compromises over 1,300 npm packages totaling 2 billion downloads

Microsoft patches Nightmare Eclipse's RoguePlanet Defender zero-day

Apple revises iOS rules in Brazil after regulator pact

China-linked UNC6508 deploys InfiniteRed malware on exposed REDCap servers

Microsoft Uncovers Malware in Mistral AI PyPI Package

Defender Falsely Flags DigiCert Root Certs as Malware

Results for "Malware"

Researchers say hackers hijacked AOMEI update servers to spread malware

Rank Math PRO plugin downloads carried malware that could backdoor WordPress sites

ChainDrop worm compromises over 1,300 npm packages totaling 2 billion downloads

Microsoft patches Nightmare Eclipse's RoguePlanet Defender zero-day

Apple revises iOS rules in Brazil after regulator pact

China-linked UNC6508 deploys InfiniteRed malware on exposed REDCap servers

Microsoft Uncovers Malware in Mistral AI PyPI Package

Defender Falsely Flags DigiCert Root Certs as Malware