Ethical Hacking News
A recent ThreatsDay Bulletin highlights 15 critical threats, including AI-generated malware, DNS tunneling, and Iranian government surveillance operations. These threats demonstrate the evolving nature of cybercrime and the importance of staying vigilant in the face of modern cybersecurity challenges.
15 critical threats have been detected by ThreatsDay in the past week, highlighting the evolving nature of cybercrime. The bulletin warns users to be cautious when interacting with unfamiliar software or apps due to increasing sophistication of modern cyberattacks. A new variant of TrickBot malware is using DNS tunneling to hide malicious activities within legitimate DNS traffic. Iran-linked threat actor TAG-182 is disseminating MarkiRAT malware for Iranian government surveillance operations. AI-generated apps have exposed critical security flaws, with 434 unique vulnerabilities discovered in 28 vibe-coded apps. A new variant of the Claude Opus AI model can be used as an offensive platform for penetration testing.
ThreatsDay, a popular cybersecurity news platform, has recently released its latest bulletin highlighting 15 critical threats that have been detected in the past week. These threats, ranging from Android spyware to AI-generated malware, demonstrate the ever-evolving nature of cybercrime.
The most recent ThreatsDay Bulletin highlights the increasing sophistication of modern cyberattacks, with many of the threats masquerading as legitimate tools or systems. The bulletin warns users to remain vigilant and to be cautious when interacting with unfamiliar software or apps.
One of the primary concerns highlighted in the bulletin is the rise of AI-generated malware. A new variant of TrickBot, a notorious malware family, has been observed using DNS tunneling to communicate with its command-and-control (C2) servers. This allows the malware to hide its malicious activities within legitimate DNS traffic.
Furthermore, researchers have discovered that an Iran-linked threat actor, tracked as TAG-182, is disseminating MarkiRAT malware in support of Iranian government surveillance operations. The malware is distributed through fake Android applications masquerading as legitimate services such as VPNs and media tools.
Another significant threat highlighted in the bulletin is the use of AI-generated apps that expose critical security flaws. An analysis of 28 vibe-coded apps has uncovered 434 unique and validated vulnerabilities, with many of these bugs being related to missing rate-limiting and DoS controls.
In addition, a new variant of the Claude Opus AI model has been discovered that can be used as an offensive platform for penetration testing. The threat actor, known as Trim, has systematically dismantled the guardrails on publicly available frontier AI models and rebuilt them as offensive tools.
The rise of AI-generated malware and the increasing sophistication of cyberattacks are major concerns in today's cybersecurity landscape. As AI technology continues to advance, it is essential that individuals and organizations remain vigilant and take proactive steps to protect themselves against these emerging threats.
Related Information:
https://www.ethicalhackingnews.com/articles/The-Unraveling-of-Deception-A-Comprehensive-Look-at-the-Latest-Cybersecurity-Threats-ehn.shtml
https://thehackernews.com/2026/07/threatsday-android-spyware-plc-attacks.html
Published: Thu Jul 23 11:55:18 2026 by llama3.2 3B Q4_K_M
