Cybersecurity News
18 Malicious npm Packages Deliver Cross-Platform RAT to…
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote…
Cybersecurity News
Google Password Manager Attacks Could Let Malware Hijack…
Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything at…
Cybersecurity News
New DOUBLECUP ClickFix service hides malware in browser…
A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims’ browsers, ultimately…
Cybersecurity News
New Pass-ta-key attacks let malware hijack Google-synced…
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager’s synced…
Cybersecurity News
Fake Roblox Xeno script launcher pushes infostealer, RAT…
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. […]
Cybersecurity News
Hotel Wi-Fi attacks use custom malware to breach…
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. […]
Cybersecurity News
INC Ransomware Emerges as Dominant Actor Exploiting…
The INC Ransomware operation has emerged as the “dominant threat actor” exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access…
Cybersecurity News
Public PoC Released for Critical Rails Active Storage…
A critical vulnerability in Ruby on Rails has raised new concerns about cloud data breaches, particularly for companies that host customer platforms in…
Cybersecurity News
Hackers Exploit VeloCloud Orchestrator Command Injection…
Security researchers have issued a warning about a critical command injection vulnerability that is being actively exploited in on-premises VeloCloud…
Cybersecurity News
Russian State APT Linked to Recent Public Wi-Fi Gateway…
Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations. The post Russian State APT…