CERT24Weekly recap: Linux rootkit, macOS crypto stealer, WebSocket skimmers and moreLoading data…
CERT24Threat Observatory
Period

Weekly recap: Linux rootkit, macOS crypto stealer, WebSocket skimmers and more

The Hacker News weekly recap covers attacks and vulnerabilities including active exploitation of CVE-2026-6973 and CVE-2026-0300, the QLNX Linux remote access trojan, the PCPJack campaign targeting cloud environments, a DAEMON Tools supply-chain attack, and compromise of the JDownloader website. It also discusses vishing, ClickFix, phishing, WebSocket backdoors, the FIRESTARTER backdoor on Cisco devices, and attacks against water-treatment plants.

← Back to intelligence

Weekly recap: Linux rootkit, macOS crypto stealer, WebSocket skimmers and more

The Hacker News weekly recap covers attacks and vulnerabilities including active exploitation of CVE-2026-6973 and CVE-2026-0300, the QLNX Linux remote access trojan, the PCPJack campaign targeting cloud environments, a DAEMON Tools supply-chain attack, and compromise of the JDownloader website. It also discusses vishing, ClickFix, phishing, WebSocket backdoors, the FIRESTARTER backdoor on Cisco devices, and attacks against water-treatment plants.