Sophisticated Daxin Malware Reemerges in Taiwan with Additional Backdoor Capability
Daxin and its new Stupig backdoor persisted undetected for 13 years, exploiting outdated Java software to infiltrate Taiwan's high-tech manufacturing sector.
Steve
Steve is a cyber journalist and the lead editor at Data Breach Radar.
Popular npm Package Compromised: Malware Injection Affects 2 Million Users Each Week
Millions of developers received malware through compromised npm packages; rotate credentials and audit systems immediately if your projects depend on AsyncAPI, Keyv, Axios, or @ctrl/tinycolor.
Healthcare Agency Provides Complimentary Credit Monitoring Following Patient Data Security Incident
After healthcare data breaches, most major organizations offer one to two years of free credit monitoring and identity theft protection, though federal law doesn't require it.
US Treasury Issues First Sanctions Against VPN Operators Supporting Ransomware Gangs
Treasury sanctions VPN operator and cybercriminal suppliers for enabling 25+ ransomware groups targeting U.S. hospitals, governments, and financial firms.
Ransomware incidents surge 20 percent during first half 2026
Large enterprises and U.S. healthcare organizations face accelerating ransomware targeting, with enterprise attacks up 74% and healthcare enduring 2.3 attacks daily in H1 2026.
Hackers distribute credential-stealing malware via fake software repositories
The attack exploits developer trust in open-source repositories.
Malware evades security tools through Windows symbolic link exploit
Attackers can hijack Windows Defender using symbolic links, requiring only admin access and built-in Windows commands, leaving minimal forensic traces.
Environmental activists targeted in coordinated cybersecurity breach incident
Learn what Dark Basin proved, what remains alleged, and how targeted climate groups can reduce phishing risk.
Ransomware Attacks Rise as Breached User Accounts Become Primary Attack Vector, Report Finds
Use Sophos' victim survey to prioritize account security, MFA coverage, and faster ransomware containment.
Fake Repositories Masquerade as Popular Software, Secretly Installing Malware on Developer Machines
Spot fake project pages, risky external downloads, and publisher gaps before trojanized software reaches your machine.