OnyxC2 Malware-as-a-Service Offers Enterprise-Grade Data Theft

Multiple high-impact threats and zero-days disclosed: OnyxC2 emerges as a Malware‑as‑a‑Service stealer (DLL sideloading, encrypted payloads, HVNC) targeting 210+ apps; Chaotic Eclipse published two powerful Microsoft Defender/BitLocker exploits (RoguePlanet PoC and GreatXML) that can yield SYSTEM on fully patched or recovery-mode Windows systems; Fortinet patched a critical FortiSandbox OS command‑injection (CVE-2026-25089, CVSS 9.8); and research/demo activity includes autonomous “AI worms.” Other notable issues: JDY botnet activity targeting military networks and IoT/SOHO devices, ongoing EX