NewsPalo Alto Networks Unit 42
The XG Files: Falcon C2 Flying Under The (Browser) Radar
Teaser from the source
We uncover Falcon C2, a browser-based threat framework targeting governments via malicious scripts, extensions, and the Antino implant. The post The XG Files: Falcon C2 Flying Under The (Browser) Radar appeared first on Unit 42 .
This is the RSS-feed teaser. Read the full article at the original source.
Read at Palo Alto Networks Unit 42More on Files
Other advisories
- Not ratedCVE-2026-126640The WP Ultimate CSV Importer WordPress plugin before 9.3 does not escape values from imported files before using them in SQL queries when importing LifterLM…
- Not ratedCVE-2026-126639The WP Ultimate CSV Importer WordPress plugin before 9.2, WP Ultimate CSV Importer Pro WordPress plugin before 9.0.7 do not protect the files created by the…
- Not ratedCVE-2026-123122Checkout Files Upload for WooCommerce: Cross-Site-Scripting (XSS)
- Not ratedCVE-2026-123122Checkout Files Upload for WooCommerce: Cross-Site-Scripting (XSS)
- Not ratedCVE-2026-123122The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.1 does not verify that a file uploaded at checkout is really one of its allowed image t…
- Not ratedosv:CLEANSTART-2026-DX69045When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion
- Not ratedosv:CLEANSTART-2026-AZ15174There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause Mem...
- MediumCVE-2026-115501IBM i 7.3 7.4, 7.5, and 7.6 is vulnerable to a stack buffer overflow, caused by improper bounds checking in the QFileSvr.400 file system. By sending a comman…
Other news entries
- ArcticRAT Cybercrime Gang Profiles Victim Finances With AINewsDark Reading
- Crackdown on UK medical record snooping after staff reported sneaking 300+ times this yearNewsThe Register — Security
- Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi FilesNewsThe Hacker News
- Red Hat Enterprise Linux (cockpit-files): Mehrere Schwachstellen ermöglichen Manipulation von DateienVulnerabilityBSI CERT-Bund
- AI Coding Agents Leak Thousands of Secrets to GitHubNewsDark Reading
- Binance warns of iOS flaw that could leak crypto wallet secretsNewsBleepingComputer
- Over a Dozen Organizations Hit in Qubole Supply Chain AttackNewsSecurityWeek
- Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix ConfirmedNewsThe Hacker News
Source: https://unit42.paloaltonetworks.com/falcon-c2-browser-compromise/
ID