• Follow Us

Locked Dorr Security

  • Home
    • Newsletter
    • Locked Dorr Security Blog
  • Cyber News
    • Latest Cyber News and Breaches
    • Latest Malware
    • Latest in Scada and Industrial Control
  • Useful Links and How To Posts
    • Staying Up to Date with Cyber
    • Virtulization
      • Set up a “Host Only” Malware Testing Environment in esxi
      • Setting up ProxMox on a Trunk with multiple Interfaces
      • Import vmdk Virtual Disk from OVF into ProxMox
      • Setting Up a SPAN and Linux Bridge for a Network Sensor
    • Remote Management
      • Gl-iNet Travel Router with Wireguard
      • Guacamole Server for Clientless RDP/VNC Access
      • SSH login with Keys: Login without a Password
      • Lab Management with Portainer with DashMachine
    • Linux
      • Managing Linux Firewalls
    • pfSense and Hosting Web Services
      • SSL Offloading with HA Proxy on pfSense
      • Using Cloudflare with Namecheap DNS & Web-hosting Services and pfSense HA Proxy
    • Protecting Network Traffic with Wireguard or VPNs
      • Protecting your network traffic with Wireguard
      • Adding HA Proxy with Wireguard to proxy Network Traffic to pfSense
    • Install Arkime for conducting PCAP Analysis
    • Install Elastiflow Server on Ubuntu 20.04.1 LTS
    • Shutdown multiple Docker Images Gracefully
    • Updating my CTFd Docker Container with local git clones Repositories
    • Useful Links and How To Posts
  • Defensive Cyber
    • Scanning Techniques with NMAP
    • Packet Analysis with Magic Shark
    • Packet Analysis with tshark
    • Packet Analysis with Data Science
  • Hacktivities
    • RouterSpace Write-up on HTB
  • Docs
  • Home
    • - Newsletter
    • - Locked Dorr Security Blog
  • Cyber News
    • - Latest Cyber News and Breaches
    • - Latest Malware
    • - Latest in Scada and Industrial Control
  • Useful Links and How To Posts
    • - Staying Up to Date with Cyber
    • - Virtulization
      • - - Set up a “Host Only” Malware Testing Environment in esxi
      • - - Setting up ProxMox on a Trunk with multiple Interfaces
      • - - Import vmdk Virtual Disk from OVF into ProxMox
      • - - Setting Up a SPAN and Linux Bridge for a Network Sensor
    • - Remote Management
      • - - Gl-iNet Travel Router with Wireguard
      • - - Guacamole Server for Clientless RDP/VNC Access
      • - - SSH login with Keys: Login without a Password
      • - - Lab Management with Portainer with DashMachine
    • - Linux
      • - - Managing Linux Firewalls
    • - pfSense and Hosting Web Services
      • - - SSL Offloading with HA Proxy on pfSense
      • - - Using Cloudflare with Namecheap DNS & Web-hosting Services and pfSense HA Proxy
    • - Protecting Network Traffic with Wireguard or VPNs
      • - - Protecting your network traffic with Wireguard
      • - - Adding HA Proxy with Wireguard to proxy Network Traffic to pfSense
    • - Install Arkime for conducting PCAP Analysis
    • - Install Elastiflow Server on Ubuntu 20.04.1 LTS
    • - Shutdown multiple Docker Images Gracefully
    • - Updating my CTFd Docker Container with local git clones Repositories
    • - Useful Links and How To Posts
  • Defensive Cyber
    • - Scanning Techniques with NMAP
    • - Packet Analysis with Magic Shark
    • - Packet Analysis with tshark
    • - Packet Analysis with Data Science
  • Hacktivities
    • - RouterSpace Write-up on HTB
  • Docs

Latest Malware

  • New Zealand's Fisher & Paykel Healthcare hit by cyber breach – Reuters
    October 21, 2026
    … ransomware or malware identified, and that it expects no material financial impact. New Zealand's ​National Cyber Security ​Centre ⁠did not …
  • LiteLLM Compromised – Hackers Injected an Infostealer and RAT in the Latest 1.107.0 PyPI Release
    October 21, 2026
    PyPI removed version 1.107.0, but taking down the package does not remove malware already installed or invalidate secrets attackers may have stolen.
  • LiteLLM supply chain attack hoovers up passwords and secrets – The Register
    October 21, 2026
    Unknown crims compromised LiteLLM's release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal …
  • Description of PHP vulnerabilities: CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)
    October 21, 2026
    Kaspersky solutions detect the described malicious activity at various stages of the attack. Possible detection scenarios are listed below. When an …
  • LiteLLM 1.107.0 Compromised With A RAT InfoStealer – OX Security
    October 21, 2026
    0 is included in the OX Security malware database. OX customers using VibeSec who try to install the malicious version will be blocked by the platform …
  • 'VisionQuest' Episodes 3 and 4 Introduce a New Threat – Gizmodo
    October 21, 2026
    'Reboot' and 'Malware' turn up the pressure as a new villain emerges.
  • High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
    October 21, 2026
    High severity flaws are exploited faster; ransomware remains the dominant threat; the US is the world's most targeted country, and attacks …
  • Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign
    October 21, 2026
    The operation, conducted by operatives from APT28, also known as Fancy Bear, involved both familiar malware and a mysterious new piece of code.
  • DHS Asked CISA To Hack An Election Machine – Forbes
    October 21, 2026
    Citizen Lab also claimed to have spotted new malware from NSO Group, another Israeli spyware company, targeting opposition figures in Serbia.
  • Memory Bugs Account for Most of Chrome's 353 New Security Fixes – SecurityWeek
    October 21, 2026
    Malware & Threats · Cyberwarfare · Cybercrime · Data Breaches · Fraud … The latest Chrome iteration is now rolling out as versions 156.0.8078.47 …
  • LiteLLM Compromised, Steals Credentials | Wiz Blog
    October 21, 2026
    In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version …
  • Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign – Yahoo
    October 21, 2026
    Symantec assembled a picture of the campaign using forensic data about the hackers' Hookedge malware, which the group delivered through infected …
  • Lazarus group uses AI and post-quantum cryptography in its cyberattacks – Digital Watch Observatory
    October 21, 2026
    Kaspersky's investigation reveals Lazarus's use of new malware, cloud-based command-and-control, and quantum-resistant cryptography.
  • China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors
    October 21, 2026
    BRONZE SANDCASTLE abuses legitimate Windows apps to load encrypted backdoors, collect system information and steal Active Directory data.
  • PHP warns admins of two critical flaws, emergency patches coming tomorrow
    October 21, 2026
    The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, …
  • Info-stealing malware slipped into OVHcloud CLI releases on GitHub – Help Net Security
    October 21, 2026
    OVHcloud deleted the malicious files before anyone could archive them, so OpenSourceMalware has not analyzed the payload. Based on the platforms the …
  • 5 New Crypto-Stealing Malware Tactics You Need to Know – HackerNoon
    October 21, 2026
    From fake games to malicious extensions and cryptojacking, crypto-stealing malware is getting sneakier. Here's what to watch for before it hits.
  • Nearly all North Korean websites go offline in mysterious outage | NK PRO
    October 21, 2026
    … latest outages is longer than typical maintenance periods. … North Korean cybercriminals target Ukraine-focused groups with new malware …
  • Dissecting Operation FlashHole, a complex attack by Lazarus – Securelist
    October 21, 2026
    These techniques conceal their malicious payloads, intent and their sophisticated malware delivery framework. The latter was updated extensively …
  • Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
    October 21, 2026
    GhostAction infected 790 GitHub repositories with malicious workflows, risking cloud credentials, publishing tokens, and AI service keys.
Welcome to Locked Dorr Security
  • PRIVACY POLICY
  • TERMS OF USE
  • CONTACT US