Steam Workshop abused to spread malware via Wallpaper Engine app

Published on June 16, 2026

Threat actors are abusing Steam Workshop, Valve's community hub for downloading game-related content, to push various malware hidden in wallpaper packages. [...]

Continue reading on website
Other news

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

June 16, 2026
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively.Attacks involving BabaDeda Loader, observed in April 2026, have targeted education and financial organizations."Earlier BabaDeda activity was known for

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

June 16, 2026
A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim's project hijack the victim's machine learning model upload and run code inside Google's serving infrastructure.Palo Alto Networks Unit 42, which found and reported the bug through Google's bug bounty program, calls the technique "Pickle in the Middle" and said it saw no exploitation in the wild.