Topic

Malware: news, advisories and analysis

3 articlesUpdated 30 Sep 2026

CyberSecureToday covers Malware across 3 articles published between 10 Sep 2026 and 30 Sep 2026. The coverage includes 2 vulnerability advisories and 1 analysis or guidance piece. 2 advisories are rated critical or high severity.

Stories on Malware most often intersect with PyPI, Supply Chain Security and vLLM, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Malicious PyPI Package Masquerades as vLLM Process to Exfiltrate Vector Database Weights (GHSA-rghm-9c3j-wc97)”, was published 30 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
Malicious PyPI Package Masquerades as vLLM Process to Exfiltrate Vector Database Weights (GHSA-rghm-9c3j-wc97)
A sophisticated typosquatted Python package targets AI engineering pipelines, masquerading as vLLM inference worker daemons to exfiltrate proprietary model weights.
CST Editorial Desk30 Sep 202610 min read
ResearchGov & Defence
Anthropic says AI is moving from assistant to orchestrator in cyber operations
Anthropic’s September threat report describes how actors used Claude for reconnaissance, intrusion support, tool rebuilding and parallelized cyber operations.
Mei-Lin Chen12 Sep 20267 min read
ThreatsBanking & FintechHigh
Gigabud Android Banking Trojan Abuses Work Profiles to Evade Client-Side Detection
Group-IB uncovered a major evolution in the Gigabud banking trojan, which uses Android enterprise Work Profiles to isolate tampered banking apps and blind client security checks.
Mei-Lin Chen10 Sep 20265 min read

Latest coverage

Malicious PyPI Package Masquerades as vLLM Process to Exfiltrate Vector Database Weights (GHSA-rghm-9c3j-wc97)

Anthropic says AI is moving from assistant to orchestrator in cyber operations

Gigabud Android Banking Trojan Abuses Work Profiles to Evade Client-Side Detection