Apple quickly moves to patch the zero-day flaws following report by Citzen Lab. Apple device users are urged to run update.

Affordable Android TV boxes, including MX10 Pro 6K, Tanix TX6 TV Box, and H96 MAX X3, have been targeted by a new variant of the Pandora backdoor associated with the Mirai botnet malware to facilitate distributed denial-of-service attacks, reports BleepingComputer.

Attackers potentially based in France, Luxembourg and Germany are targeting industries that use 3D modeling and graphics to generate cryptocurrency.

Threat actors have launched new SocGholish infection chains using an updated BLISTER malware loader to facilitate the delivery of Mythic, an open-source command-and-control framework, The Hacker News reports.

More robust attack tools have been leveraged by North Korean state-sponsored threat operation Andariel, a Lazarus Group sub-cluster, as it ramped up intrusions against South Korean companies and organizations across different sectors, according to The Hacker News.

Researchers at Morphisec say that the fourth version of the Chaes malware has shifted to Python, which results in lower detection rates by traditional defense systems.

More threat actors have been leveraging the leaked source code of open-source information-stealing malware SapphireStealer to develop improved versions of the malware, according to The Hacker News.

SecurityWeek reports that more than 1,000 organizations around the world could be subjected to subdomain hijacking attacks leveraging dangling DNS records.