Chinese Mustang Panda hackers deploy infostealers via CoolClient backdoor

Published on January 27, 2026

The Chinese espionage threat group Mustang Panda has updated its CoolClient backdoor to a new variant that can steal login data from browsers and monitor the clipboard. [...]

Continue reading on website
Other news

WinRAR path traversal flaw still exploited by numerous hackers

January 27, 2026
Multiple threat actors, both state-sponsored and financially motivated, are exploiting the CVE-2025-8088 high-severity vulnerability in WinRAR for initial access and to deliver various malicious payloads. [...]

Fortinet blocks exploited FortiCloud SSO zero day until patch is ready

January 27, 2026
Fortinet has confirmed a new, actively exploited critical FortiCloud single sign-on (SSO) authentication bypass vulnerability, tracked as CVE-2026-24858, and says it has mitigated the zero-day attacks by blocking FortiCloud SSO connections from devices running vulnerable firmware versions. [...]