Week of January 19, 2026

A new open-source red team framework, MultiLang-Evasion-Framework, has been published on GitHub. It combines multiple endpoint evasion techniques including Hell's Gate indirect syscalls, ETW patching, and parent process spoofing to bypass EDR and AV detection. The framework supports payload generation in multiple languages and includes a C2 platform.

A newly discovered cloud-focused malware framework named VoidLink is believed to have been developed by a single individual with the help of an artificial intelligence model. The malware targets cloud environments and exhibits characteristics consistent with AI-generated code. This development highlights the emerging threat of AI-assisted malware creation.