Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The Hacker News - Oct 15, 2026

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

Read full article

More News

New study sounds alarm as Doomsday Glacier melts more aggressively than thought
Oct 15, 2026
New study sounds alarm as Doomsday Glacier melts more aggressively than thought

New study sounds alarm as Doomsday Glacier melts more aggressively than thoughtAccording to new research by a team of glaciologists, the planet’s widest glacier is experiencing accelerated mass loss beyond their models, meaning its significant impact on global sea level rise could be double...

GTA 6 - all you need to know about Rockstar's blockbuster game
Oct 15, 2026
GTA 6 - all you need to know about Rockstar's blockbuster game

A new launch trailer for Grand Theft Auto VI reveals more details about what's set to be the biggest game of the year.

Inside the Plague Research Labs at the Heart of a Russian Mystery
Oct 15, 2026
Inside the Plague Research Labs at the Heart of a Russian Mystery

A Russian researcher, who died from an unknown illness, worked at a remote anti-plague facility. Few foreigners have visited these labs, which dot the former Soviet states, and are shrouded in secrecy.

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
Oct 15, 2026
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed to be active since at least 2017, offering PHP code templates to partners and affiliates that are installed into compromised websites with an aim to direct unsuspecting

Sheep are disappearing from our hills - and our dinner plates
Oct 15, 2026
Sheep are disappearing from our hills - and our dinner plates

Have we have passed "peak sheep" in the UK?

French crypto unicorn Ledger warns of AI security risks
Oct 15, 2026
French crypto unicorn Ledger warns of AI security risks

Artificial intelligence is "changing the security landscape". That's according to Ledger, a French unicorn of cryptocurrency that's seeking a bigger role in digital security. Chief Technology Officer Charles Guillemet says: "Finding vulnerabilities and exploiting them costs almost nothing. So this is the new challenge that we have, as the security industry in general – how can we raise the bar for security so it becomes so difficult to break systems? And I think hardware is part of the equation."

Alibaba sets sights on record-breaking Singles’ Day with 1 million brands joining festival
Oct 15, 2026
Alibaba sets sights on record-breaking Singles’ Day with 1 million brands joining festival

Alibaba Group Holding is gearing up for its annual Singles’ Day shopping festival on major online marketplaces Taobao and Tmall, with the company expecting a record one million global brands to take part this year. Pre-sales for the event open on Thursday, followed by the formal sale next Tuesday. The company projects more than 70 million products to feature, also a record for the festival. Created by Alibaba in 2009, Singles’ Day has grown into the world’s largest online shopping festival. Also...

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
Oct 15, 2026
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit. A fourth lets an attacker forge a TLS session that could

DeepSeek offers user refunds after suffering another major outage
Oct 15, 2026
DeepSeek offers user refunds after suffering another major outage

Chinese artificial intelligence firm DeepSeek apologised and promised compensation to users after its services suffered a nearly five-hour outage on Thursday. DeepSeek will issue users a full refund for any consumption between October 8 and October 14 in the form of credits, according to a notice posted on the Hangzhou-based start-up’s application programming interface (API) platform. DeepSeek’s namesake chatbot and API services for its V4 Pro and V4.1 Flash models went offline on Thursday...

How could a superintelligence take over the world? Let me count the ways
Oct 15, 2026
How could a superintelligence take over the world? Let me count the ways

OpenAI recently announced perhaps its biggest mathematics breakthrough yet: it released novel results on 377 high-profile open problems. Artificial intelligence (AI) casually solved these decades-old problems as a mere by-product of training. The community of mathematicians did not universally welcome this development, with University of Connecticut professor Alvaro Lozano-Robledo commenting: “I am not sure at this point what this (hostile?) takeover of the mathematical landscape is trying to...

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Oct 15, 2026
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images. The fixes are in

China, North Korea open long-delayed trade bridge
Oct 15, 2026
China, North Korea open long-delayed trade bridge

China and North Korea formally opened the Yalu River Bridge on Thursday, connecting Dandong in China with Sinuiju in North Korea. Beijing says the bridge will promote economic and trade cooperation.

Recommended