Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

This week, Tanium’s Cyber Threat Intelligence (CTI) team investigates SystemBC, a large-scale proxy botnet that’s leveraging compromised virtual private server (VPS) infrastructure to support cybercriminal operations, including ransomware and credential theft. Next, the team looks at ShinyHunters—a financially motivated data extortion group that’s now targeting enterprise cloud applications.

Linux patch management is the disciplined process of identifying, testing, and applying security patches and updates to Linux-based systems. It’s essential for fixing vulnerabilities, improving performance, and maintaining compliance—ensuring your infrastructure remains resilient in the face of evolving threats.

Details from Tanium’s Guardian research team about CVE-2025-20333, CVE-2025-20362, and CVE-2025-20363—and emerging malware campaigns RAYINITIATOR & LINE VIPER.

AMOS Stealer campaign targets macOS, TAG-150 deploys new CastleRAT malware, and GPUGate targets IT firms in Western Europe.

Threat actors use HexStrike AI to orchestrate cyberattacks, TinkyWinkey keylogger threatens Windows systems, and Silver Fox APT exploits a vulnerable driver to disable endpoint security.