Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure UAC-0277: ClickFix on compromised websites to spread LUNEXSTEALER MALFEX – A malicious npm postinstall no advisory has caught for fourteen months Canto incognito: tracking the PoeLLM malware TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 118
About this summary. This is a short, independently written summary of an article first published by Security Affairs. Cyber Security News did not report or verify the underlying story. Read the original: https://securityaffairs.com/200775/breaking-news/security-affairs-malware-newsletter-round-118.html
Source attribution: headline and facts are from Security Affairs (securityaffairs.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
Fortinet details ClingSTUN, a Linux backdoor exploiting unpatched IoT devices and abusing public STUN servers to route traffic past NAT. FortiGuard Labs researchers…
ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
The Linux backdoor exploits 24 known flaws to compromise IoT devices and uses legitimate public STUN servers to obscure communications.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and…
Physical Side-Channel Attacks on Edge LLMs: Extracting Output Tokens and User Prompts
arXiv:2610.14215v1 Announce Type: new Abstract: The deployment of large language models (LLMs) on edge devices is largely motivated by privacy concerns over sharing…
Watermarking for Byzantine Robust LLM Training
arXiv:2610.14289v1 Announce Type: new Abstract: LLM watermarking has emerged as a promising approach for detecting downstream model misuse in centralized settings, but…
When Does Trust Help? A Leakage-Free Evaluation of Representation- and Aggregation-Based Defenses Against Backdoors in Federated Intrusion Detection
arXiv:2610.14767v1 Announce Type: new Abstract: Federated learning (FL) lets distributed intrusion-detection systems (IDS) train on private traffic, but exposes the…