Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

DarkCloud malware targets sensitive data, a new cybercrime alliance targets major sectors, and WARMCOOKIE malware continues to evolve.

Third-party patch management is a vital security practice that involves identifying, testing, and applying updates to third-party software, including business-critical applications like browsers, plug-ins, and productivity tools, to reduce risk, maintain compliance, and ensure endpoint stability.

This week, Tanium’s Cyber Threat Intelligence (CTI) team investigates SystemBC, a large-scale proxy botnet that’s leveraging compromised virtual private server (VPS) infrastructure to support cybercriminal operations, including ransomware and credential theft. Next, the team looks at ShinyHunters—a financially motivated data extortion group that’s now targeting enterprise cloud applications.

Linux patch management is the disciplined process of identifying, testing, and applying security patches and updates to Linux-based systems. It’s essential for fixing vulnerabilities, improving performance, and maintaining compliance—ensuring your infrastructure remains resilient in the face of evolving threats.

Details from Tanium’s Guardian research team about CVE-2025-20333, CVE-2025-20362, and CVE-2025-20363—and emerging malware campaigns RAYINITIATOR & LINE VIPER.

AMOS Stealer campaign targets macOS, TAG-150 deploys new CastleRAT malware, and GPUGate targets IT firms in Western Europe.

Threat actors use HexStrike AI to orchestrate cyberattacks, TinkyWinkey keylogger threatens Windows systems, and Silver Fox APT exploits a vulnerable driver to disable endpoint security.

Advanced endpoint protection (AEP) secures devices using intelligent, multi-dimensional defenses that go beyond traditional antivirus.

As part of Tanium’s ongoing partnership with Filigran, provider of open-source cybersecurity solutions, the new Tanium Connector for OpenBAS with the existing Tanium Connector for OpenCTI will help organizations more quickly identify and remediate cyber threats.