SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

ESET WeLiveSecurity RSS collection covering cybersecurity research, malware, APT activity, scams, phishing, vulnerabilities, AI security, and threat reports published from July through November 2026. Notable entries include DNS hijacking to distribute malware via Sogou Input Method, the Gorbag infostealer campaign targeting Ukrainian organizations, PHP2Shell critical vulnerabilities CVE-2026-109618 and CVE-2026-109619, MythicRatatoskr in a UAC-0099/Sandworm operation, vulnerable UEFI shims that can bypass Secure Boot, and multiple infostealer and backdoor reports.