UnsolicitedBooker Targets Central Asian Telecoms With LuciDoor and MarsSnake Backdoors

The threat activity cluster known as UnsolicitedBooker has been observed targeting telecommunications companies in Kyrgyzstan and Tajikistan, marking a shift from prior attacks aimed at Saudi Arabian entities. The attacks involve the deployment of two distinct backdoors codenamed LuciDoor and MarsSnake, according to a report published by Positive Technologies last week. “The group used several […]

Continue Reading

Anthropic Says Chinese AI Firms Used 16 Million Claude Queries to Copy Model

Ravie LakshmananFeb 24, 2026Artificial Intelligence / Anthropic Anthropic on Monday said it identified “industrial-scale campaigns” mounted by three artificial intelligence (AI) companies, DeepSeek, Moonshot AI, and MiniMax, to illegally extract Claude’s capabilities to improve their own models. The distillation attacks generated over 16 million exchanges with its large language model (LLM) through about 24,000 fraudulent […]

Continue Reading

APT28 Targeted European Entities Using Webhook-Based Macro Malware

Ravie LakshmananFeb 23, 2026Malware / Threat Intelligence The Russia-linked state-sponsored threat actor tracked as APT28 has been attributed to a new campaign targeting specific entities in Western and Central Europe. The activity, per S2 Grupo’s LAB52 threat intelligence team, was active between September 2025 and January 2026. It has been codenamed Operation MacroMaze. “The campaign […]

Continue Reading

Cybersecurity stock selling deepens on AI threat concerns. Why we’re not bailing

Investors are running for the exits on cybersecurity stocks as persistent artificial intelligence disruption fears overpower the industry’s strong fundamentals. We are not among them. The steep sell-off began Friday and extended into Monday’s session following Anthropic’s announcement of Claude Code, an AI-powered assistant designed to scan code bases for security vulnerabilities and suggest targeted […]

Continue Reading

Wormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb

Cybersecurity researchers have disclosed details of a new cryptojacking campaign that uses pirated software bundles as lures to deploy a bespoke XMRig miner program on compromised hosts. “Analysis of the recovered dropper, persistence triggers, and mining payload reveals a sophisticated, multi-stage infection prioritizing maximum cryptocurrency mining hashrate, often destabilizing the victim system,” Trellix researcher Aswath […]

Continue Reading

Cybersecurity stocks drop for a second day as new Anthropic tool fuels AI disruption fears

CrowdStrike CEO George Kurtz speaks at the Wall Street Journal Tech Live conference in Laguna Beach, California, on Oct. 21, 2019. Martina Albertazzi | Bloomberg | Getty Images Cybersecurity stocks dropped for a second day on Monday as investors fretted over new artificial intelligence security tools that threaten to displace the sector’s longstanding business models. […]

Continue Reading

Google spinout Aalyria valued at $1.3 billion as investors pour into space-based communications

Aalyria CTO and founder Brian Barritt Courtesy Aalyria In 2022, Google spun out a project focused on high-speed communications networks into a startup called Aalyria. Less than four years later, Aalyria is being valued by investors at $1.3 billion in a new funding round, reflecting soaring demand for reliable, speedy telecommunications. Aalyria’s software helps networks […]

Continue Reading