TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
More on PowerShell
Other advisories
- Not ratedosv:CVE-2026-119025open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
- Not ratedCVE-2026-116627Devolutions PowerShell Universal: Cross-Site-Scripting (XSS)
- Not ratedCVE-2026-116627Devolutions PowerShell Universal: Cross-Site-Scripting (XSS)
- HighCVE-2026-96251Microsoft PowerShell Remote Code Execution Vulnerability
- MediumCVE-2026-96303Microsoft PowerShell Security Feature Bypass Vulnerability
- HighCVE-2026-119025npm open PowerShell injection (CVE-2026-119025): malicious MCP servers can run code on Windows/WSL via OpenCode and MCP Inspector sign-in
- CriticalCVE-2026-83578Ein Ganzzahlunterlauf (Wraparound) in Windows PowerShell ermöglicht es einem nicht autorisierten Angreifer, Code über ein Netzwerk auszuführen.
- MediumCVE-2026-96303Microsoft PowerShell 7.4: fehlerhaft implementierte Sicherheitsprüfung
Other news entries
- 10 ways attackers abuse AI services to hack your businessNewsCSO Online
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python PackagesNewsSecurityWeek
- Microsoft Entwicklerwerkzeuge: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Microsoft Entwicklerwerkzeuge: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Hackers Use ChatGPT Custom GPTs in ClickFix AttacksNewsSecurityWeek
- Placeholder domain used in dev docs now serves ClickFix attacksNewsBleepingComputer
- Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackersNewsCSO Online
- 'TerminalFix' Campaign Weaponizes PowerShell for Enterprise AttacksNewsDark Reading
Source: https://thehackernews.com/2026/09/taskstomp-powershell-backdoor-steals.html
ID