search

April 8, 2026

EvilTokens Uses Stolen Microsoft 365 Tokens, AI to Supercharge BEC

EvilTokens is a new Phishing-as-a-Service (PhaaS) platform that turns stolen Microsoft 365 tokens and AI into an end‑to‑end factory for…
Read More »
April 8, 2026

Claude Code Leak Exploited to Spread Vidar and GhostSocks via GitHub Releases

Hackers exploited the exposed Claude Code source leak as a channel for malware distribution, using GitHub Releases to deliver the…
Read More »
April 8, 2026

ComfyUI Servers Hijacked for Cryptomining, Proxy Botnet Ops

Hackers are aggressively hijacking Internet-exposed ComfyUI servers and converting them into high‑value cryptomining rigs and proxy botnet nodes, abusing weakly…
Read More »
April 7, 2026

Fake Gemini npm Package Steals AI Tool Tokens

Malicious actors are exploiting a counterfeit Gemini-themed npm package to pilfer tokens and secrets from developers utilizing AI coding tools…
Read More »
April 3, 2026

LinkedIn Hidden Code Secretly Scans Users’ Computers for Installed Software

A new investigation by Fairlinked e.V. claims that Microsoft-owned LinkedIn is running a massive, undisclosed corporate surveillance operation. According to…
Read More »
April 1, 2026

Windows 11 Update Fixes Critical Installation Loop Problem

Microsoft has rolled out an urgent, out-of-band update to fix a frustrating installation glitch plaguing Windows 11 users. On March…
Read More »
March 31, 2026

Apple Adds ClickFix Attack Warnings in New macOS Tahoe Security Feature

Apple has silently introduced a new security mechanism in macOS Tahoe 26.4 to protect users against social engineering campaigns known…
Read More »
March 25, 2026

New Study Reveals How Infostealer Infections Lead to Dark Web Exposure in Just 48 Hours

New research highlights how infostealer malware can rapidly convert a single careless click into full credential exposure on dark web…
Read More »
March 24, 2026

Roundcube Releases Urgent Security Update to Fix Critical Bugs

Roundcube Webmail has issued an urgent security update addressing eight critical vulnerabilities discovered by independent security researchers. This release, version…
Read More »
March 23, 2026

Critical QNAP QVR Pro Flaw Could Let Remote Attackers Access Systems

QNAP has released an urgent security advisory regarding a critical vulnerability affecting its QVR Pro application, a widely deployed network…
Read More »
March 23, 2026

MioLab MacOS Stealer Expands With ClickFix, Wallet Theft, Team APIs

As Apple’s macOS footprint grows in both consumer and enterprise environments, dedicated infostealers like MioLab (aka Nova) demonstrate that Macs…
Read More »
March 23, 2026

SEO Poisoning Campaign Uses Fake Popular Apps to Deliver AsyncRAT

An ongoing SEO poisoning campaign abuses search results to trick users into downloading trojanized installers for more than 25 popular…
Read More »
March 19, 2026

Claude Vulnerabilities Allow Data Exfiltration and Malicious Redirect Attacks

Security researchers have uncovered a critical attack chain within Anthropic’s Claude.ai platform, dubbed “Claudy Day.” This vulnerability sequence enables attackers…
Read More »
March 19, 2026

Pyronut Package Backdoors Telegram Bots With RCE

Malicious ‘Pyronut’ is a trojanized Python package that backdoors Telegram bots and userbots, giving attackers remote code execution over both…
Read More »
March 18, 2026

ForceMemo Hijacks GitHub Accounts, Backdoors Python Repos

ForceMemo represents an active campaign targeting GitHub accounts and Python repositories, leveraging force-pushed commits to silently implant malware. Utilizing GlassWorm’s…
Read More »
March 18, 2026

New Kubernetes NFS CSI Vulnerability Enables Unauthorized Directory Deletion and Changes

A newly disclosed security flaw in the Kubernetes Container Storage Interface (CSI) Driver for Network File System (NFS) exposes storage…
Read More »
March 14, 2026

Storm-2561 Uses SEO Poisoning, Fake Signed VPN Apps to Steal Enterprise Credentials

A financially motivated threat actor tracked as Storm-2561 is running a credential theft campaign that abuses SEO poisoning and fake,…
Read More »
March 13, 2026

Hackers Exploit CloudFlare Anti-Security to Steal Microsoft 365 Login Credentials

A recent Microsoft 365 credential harvesting campaign shows attackers exploiting CloudFlare’s protective features to shield malicious phishing sites from security…
Read More »
March 12, 2026

New ClickFix Attacks Target macOS Users with MacSync Infostealer

A new wave of ClickFix campaigns are targeting macOS users and delivering the MacSync infostealer, signaling a growing shift in…
Read More »
March 9, 2026

BoryptGrab Malware Abuses GitHub to Steal Browser and Crypto Wallet Data

A new Windows stealer dubbed BoryptGrab is being distributed through a large, ongoing campaign abusing fake GitHub repositories that pose as free…
Read More »

Previous page Next page