tokens

March 30, 2026

Telnyx Python SDK Backdoored on PyPI to Steal Cloud Credentials

The popular Telnyx Python SDK on PyPI has been used in a multi-stage credential-stealing operation targeting cloud infrastructure, Kubernetes clusters,…
Read More »
March 27, 2026

CISA Adds Critical Aquasecurity Trivy Scanner Vulnerability to KEV Catalog

CISA has urgently added a critical flaw affecting Aquasecurity’s Trivy scanner to its Known Exploited Vulnerabilities (KEV) catalog under tracking…
Read More »
March 25, 2026

Microsoft Unveils New Guidance to Detect and Defend Against Trivy Supply Chain Attack

Aqua Security’s vulnerability scanner, Trivy, faced a sophisticated CI/CD supply chain compromise. The threat actor, identified as TeamPCP, exploited prior…
Read More »
March 25, 2026

New Study Reveals How Infostealer Infections Lead to Dark Web Exposure in Just 48 Hours

New research highlights how infostealer malware can rapidly convert a single careless click into full credential exposure on dark web…
Read More »
March 24, 2026

Tycoon2FA Operators Resume Cloud Account Phishing Following Infrastructure Disruption

Tycoon 2FAoperators have restarted large-scale cloud account phishing just days after law enforcement and industry partners disrupted the platform’s core…
Read More »
March 23, 2026

Oblivion RAT Masquerades as Play Store Update to Spy on Android Users

A newly discovered Android remote access trojan (RAT) called Oblivion RAT is raising concerns across the mobile threat landscape. Marketed…
Read More »
March 23, 2026

MioLab MacOS Stealer Expands With ClickFix, Wallet Theft, Team APIs

As Apple’s macOS footprint grows in both consumer and enterprise environments, dedicated infostealers like MioLab (aka Nova) demonstrate that Macs…
Read More »
March 23, 2026

SEO Poisoning Campaign Uses Fake Popular Apps to Deliver AsyncRAT

An ongoing SEO poisoning campaign abuses search results to trick users into downloading trojanized installers for more than 25 popular…
Read More »
March 22, 2026

AstraZeneca Data Breach Allegedly Claimed by LAPSUS$ as Internal Data Access Reported

The notorious hacking collective known as LAPSUS$ has resurfaced, allegedly claiming responsibility for a significant data breach involving multinational pharmaceutical…
Read More »
March 21, 2026

Trivy Vulnerability Scanner Compromised to Inject Malicious Scripts That Steal Credentials

Ahighly sophisticated supply chain attack has successfully compromised the official Trivy GitHub Actions repository, severely impacting continuous integration environments. Discovered…
Read More »
March 19, 2026

Pyronut Package Backdoors Telegram Bots With RCE

Malicious ‘Pyronut’ is a trojanized Python package that backdoors Telegram bots and userbots, giving attackers remote code execution over both…
Read More »
March 18, 2026

Apple WebKit Security Flaw Exposes iOS and macOS Users to Content-Based Bypass Attacks

Apple released emergency security patches to address a critical WebKit flaw currently exposing iPhone, iPad, and Mac users to sophisticated…
Read More »
March 18, 2026

ForceMemo Hijacks GitHub Accounts, Backdoors Python Repos

ForceMemo represents an active campaign targeting GitHub accounts and Python repositories, leveraging force-pushed commits to silently implant malware. Utilizing GlassWorm’s…
Read More »
March 17, 2026

GitGuardian Reports 81% Surge in AI-Service Leaks on GitHub

In 2025, Developer Commits Using Claude Code Show 3.2% Secret Leak Rate vs. 1.5% Baseline. The Human Factor Remains Critical…
Read More »
March 16, 2026

Betterleaks Launches as Open-Source Tool for Scanning Files, Directories, and Git Repositories

Zach Rice, the original creator of the widely popular secret scanning tool Gitleaks, has officially launched its successor, Betterleaks. Sponsored…
Read More »
March 14, 2026

GlassWorm Spreads via 72 Malicious Open VSX Extensions Hidden in Transitive Dependencies

The GlassWorm malware campaign has advanced significantly, escalating its attacks on software developers. Instead of embedding malware directly into initial…
Read More »
March 12, 2026

New ClickFix Attacks Target macOS Users with MacSync Infostealer

A new wave of ClickFix campaigns are targeting macOS users and delivering the MacSync infostealer, signaling a growing shift in…
Read More »
March 11, 2026

UNC6426 Hackers Exploit NPM Package to Gain AWS Admin Access in 72 Hours

Attackers turned a routine NPM update into a direct path to full AWS administrator access in under 72 hours, highlighting…
Read More »
March 9, 2026

Fake CleanMyMac Site Spreads SHub Stealer, Targets Crypto Wallets

Hackers are leveraging a counterfeit CleanMyMac download site to deploy SHub Stealer on macOS users, a potent infostealer that compromises…
Read More »
March 9, 2026

BoryptGrab Malware Abuses GitHub to Steal Browser and Crypto Wallet Data

A new Windows stealer dubbed BoryptGrab is being distributed through a large, ongoing campaign abusing fake GitHub repositories that pose as free…
Read More »

Previous page Next page