Cybersecurity News Bytes

Zoom and GitLab Security Updates Address Critical RCE and Other Flaws Zoom and GitLab have issued urgent security patches for vulnerabilities including a critical remote code execution flaw in Zoom's…

Oracle January 2026 Critical Patch Update Addresses 337 Vulnerabilities Oracle has issued its first Critical Patch Update of 2026, patching 337 vulnerabilities across more than 30 product families, including several…

Microsoft Disrupts RedVDS Infrastructure in Coordinated Global Operation This operation marks a significant escalation in efforts to dismantle cybercrime hosting networks, with Microsoft leading the takedown of RedVDS, a notorious…

VoidLink Linux Malware Framework Targets Cloud Environments This summary outlines the emergence of VoidLink, a sophisticated cloud-native Linux malware framework designed for persistent access, stealthy operations, and advanced post-exploitation capabilities…

Oracle EBS Ransomware Attack Disrupts Multiple Organizations This week, a prolonged ransomware attack targeted Oracle's Enterprise Business Suite (EBS), impacting numerous organizations and exposing millions of records, highlighting vulnerabilities in…

AI-Masquerading Malware Targets U.S. Policy Entities via Venezuela-Themed Spear Phishing This sophisticated backdoor campaign, dubbed LOTUSLITE, employs advanced evasion techniques disguised as legitimate AI tools to infiltrate networks of U.S.…

ToneShell Backdoor Delivered Through Signed Kernel Driver in Mustang Panda Activity This recent campaign by the Mustang Panda threat group deploys an updated ToneShell backdoor using a signed kernel driver…

Microsoft Disrupts RedVDS Infrastructure Microsoft has taken decisive action against RedVDS, a notorious bulletproof hosting service facilitating phishing, business email compromise attacks, account takeovers, and fraud, by disrupting its global…

ToneShell Backdoor Delivered Through Signed Kernel Driver in Mustang Panda Activity This recent campaign by the Mustang Panda threat actor deploys an updated ToneShell backdoor using a signed kernel driver…

ToneShell Backdoor Delivered Through Signed Kernel Driver in Mustang Panda Activity In early January 2026, researchers identified Mustang Panda, a Chinese state-sponsored threat actor, deploying an updated version of the…