Search: “credential-stealing”

162 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 53 Ransomware 24 Threat actor 20 Exploit / PoC 20 Data breach 18 Vulnerability 12 Phishing & fraud 12 Policy & legal 3 Research 2 Industry 2

SeverityAll critical 56 high 58 medium 40 low 8 info 4

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentials

Security AffairsJul 4, 16:08 UTC · Jul 4, 2026Ransomware CVE-2026-33634 CVE-2026-48027 CVE-2026-45321+1 CVEs

60

Newly discovered PamStealer isn't your typical macOS malware

Ars Technica · SecurityJul 2, 19:38 UTC · Jul 2, 2026Malware

30

Inside Mistic, the New Stealth Backdoor in Ransomware Intrusions

Security AffairsJun 25, 15:07 UTC · Jun 25, 2026Ransomware

57

Iranian Cyber Response to Death of IRGC Head Would Likely Use Reported TTPs and Previous Access

Recorded FutureJun 23, 00:00 UTC · Jun 23, 2026Threat actor

45

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories

The Hacker NewsJun 12, 05:36 UTC · Jun 12, 2026Vulnerability1

42

Hades PyPI Attack: 19 Packages Poisoned to Auto

The Hacker NewsJun 9, 10:34 UTC · Jun 9, 2026Malware

42

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Ars Technica · SecurityJun 8, 18:34 UTC · Jun 8, 2026Malware

42

FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

The Hacker NewsJun 5, 07:01 UTC · Jun 5, 2026Malware

30

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

The Hacker NewsMay 31, 12:13 UTC · May 31, 2026Malware CVE-2026-35616

60

PAN-OS GlobalProtect Authentication Bypass (CVE-2026

The Hacker NewsMay 31, 12:13 UTC · May 31, 2026Vulnerability in the wildCVE-2026-0257 CVE-2026-35616

60

CVE-2026-35616: FortiClient EMS Flaw Actively Exploited in Malware Attacks

Security AffairsMay 29, 09:02 UTC · May 29, 2026Vulnerability in the wildCVE-2026-35616

60

U.S. CISA adds Daemon Tools, TanStack, and Nx Console flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 28, 13:14 UTC · May 28, 2026Exploit / PoC in the wildCVE-2026-8398 CVE-2026-45321 CVE-2026-48027

60

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Laravel-Lang PHP Packages Compromised to Deliver Cross

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Malware

42

Grafana Labs Says Code Breach Stemmed from TanStack Attack

Infosecurity MagazineMay 21, 08:00 UTC · May 21, 2026Ransomware

57

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise

Help Net SecurityMay 21, 00:00 UTC · May 21, 2026Vulnerability1

42

GitHub Confirms Breach of Internal Repositories

Infosecurity MagazineMay 20, 10:45 UTC · May 20, 2026Ransomware

60

RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded

The Hacker NewsMay 18, 08:40 UTC · May 18, 2026Ransomware

57

TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Malware

42

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Malware

42

‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply

CyberScoopMay 12, 21:38 UTC · May 12, 2026Malware1

55

Mini Shai

Infosecurity MagazineMay 12, 14:45 UTC · May 12, 2026Vulnerability

55

Quasar Linux RAT (QLNX): A Fileless Linux Implant Built for Stealth and Persistence

Security AffairsMay 9, 13:11 UTC · May 9, 2026Malware

42

Malicious PyTorch Lightning update hits AI supply chain security

Security AffairsMay 6, 07:04 UTC · May 6, 2026Malware

42

Bluekit phishing kit enables automated phishing with 40+ templates and AI tools

Security AffairsMay 4, 06:46 UTC · May 4, 2026Phishing & fraud

30

SAP-Related npm Packages Compromised in Credential

The Hacker NewsApr 30, 16:39 UTC · Apr 30, 2026Data breach

60

Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack

The Hacker NewsApr 27, 14:19 UTC · Apr 27, 2026Ransomware

57

STX RAT Targets Finance Sector With Advanced Stealth Tactics

Infosecurity MagazineApr 9, 15:00 UTC · Apr 9, 2026Malware

30

DeepLoad Malware Combines ClickFix With AI

Infosecurity MagazineMar 30, 12:00 UTC · Mar 30, 2026Malware

30

CISA sounds alarm on Langflow RCE, Trivy supply chain compromise after rapid exploitation

Help Net SecurityMar 27, 00:00 UTC · Mar 27, 2026Vulnerability in the wildCVE-2026-33017 CVE-2026-336341

60

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

The Hacker NewsMar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017 CVE-2026-20131

60

TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise

Infosecurity MagazineMar 25, 12:00 UTC · Mar 25, 2026Threat actor1

57

Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials

The Hacker NewsMar 25, 07:01 UTC · Mar 25, 2026Threat actor

45

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

The Hacker NewsMar 25, 06:34 UTC · Mar 25, 2026Data breach CVE-2026-33634

60

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Krebs on SecurityMar 23, 19:04 UTC · Mar 23, 2026Malware

42

Trivy Supply Chain Attack Expands With New Compromised Docker Images

Infosecurity MagazineMar 23, 15:05 UTC · Mar 23, 2026Ransomware

57

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

The Hacker NewsJan 20, 10:47 UTC · Jan 20, 2026Malware

30

Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading Tool

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Threat actor

45

Iran-Linked MuddyWater Targets 100+ Organizations in Global Espionage Campaign

The Hacker NewsDec 8, 06:03 UTC · Dec 8, 2025Threat actor

57