Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Windows Botnet x47.c Offers AI API Draining, 18 Attack Methods
2 sources 2 min
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
On Anthropic’s AI Misuse Report
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
CLOSEDQUORUM, the malware that asks four AI models what to do next
13 sources 6 min
Dell security advisory (AV26-959)
Fake Claude Max giveaway hides a Google account phishing trap
New Rapuncel Infostealer Abuses Microsoft-Signed Driver to Disable 145 Security Tools
WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected
Rogue external MFA providers can steal passwords during logins
4 min
BigCommerce alerts merchants of data breach linked to Ribon apps
Another worry for water systems: infostealer exposure
Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
One Stolen Active Directory File Can Expose Credentials for an Entire Windows Domain
Hackers Impersonate IT Help Desk on Microsoft Teams to Steal Windows Passwords
North Korea’s job interview scam runs both ways
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
in the wild 4 min
RatHat Turns Android Accessibility Into an Attack Weapon
in the wild 5 min
What Recent AI-Powered Attacks Mean for Your Identity Security
in the wild 5 min
Three Ukrainians to face charges for alleged hack of 610,000 Roblox accounts
in the wild 3 min
VectraRAT Malware-as-a-Service Lets Hackers Bypass UAC and Hijack Windows Systems
in the wild 6 min
OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign
in the wild 6 min1
OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign
in the wild 5 min2