[oxloader]

June 23, 2026

• OXLOADER delivers CastleStealer via malicious Google Ads — Elastic Security Labs profiles a previously unreported loader fronting malvertising, attributed to a likely Russian-speaking financially motivated actor. The Hacker News · Threat Activity

in Five Eyes Warns Frontier AI Will Reshape Offensive Cyber Ops as a New Entra ID Conditional Access Bypass Surfaces