Fake Software Tutorials on TikTok Spread Vidar Stealer

A batch of Infosecurity Magazine stories highlights a surge in active malware/phishing campaigns, critical exploited vulnerabilities, and widening AI security concerns. Threat actors are using fake TikTok/Instagram software tutorials to distribute the Vidar stealer, and the SilabRAT MaaS trojan uses HVNC and browser-cloning to hijack sessions and steal crypto. Multiple high-impact flaws are being addressed or actively exploited — Microsoft’s June Patch Tuesday fixed ~200 CVEs (including three zero-days), Google patched CVE-2026-11645 (Chrome RCE exploited in the wild), Check Point’s remote VPN