Collaborate Disseminate
GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools. Continue reading TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware
French police arrest HexDex hacker, a 20-year-old suspect accused of mass data theft and leaks targeting government, sports groups, and firms. Continue reading French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks
New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control. Continue reading Harvester APT Expands Spying Operations with New GoGra Linux Malware
Cybersecurity researchers at Forcepoint uncover new indirect prompt injection attacks that use hidden website code to exploit AI assistants like GitHub Copilot. Continue reading Hackers Use Hidden Website Instructions in New Attacks on AI Assistants
Acronis reveals Mustang Panda is using an updated version of LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works. Continue reading Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor
Bluesky is back online after a roughly 24-hour DDoS attack disrupted services, with the Iran-linked 313 Team claiming responsibility and no data breach reported. Continue reading Bluesky Back Online After DDoS Attack, as Iran-Linked 313 Team Takes Credit
Microsoft vulnerabilities fall, but critical flaws double, BeyondTrust report highlights rising risk in Microsoft Office, Azure, and cloud systems. Continue reading Microsoft Vulnerabilities Drop, But Critical Flaws Double, Report Warns
Grinex exchange collapses after $13.7M breach, blames Western spies as Chainalysis flags possible exit scam and sanctions evasion network links claims. Continue reading Grinex crypto exchange shuts down, blames Western agencies for $13.7M breach
Critical RCE flaw in protobuf.js lets attackers execute code via malicious schemas. Learn who is at risk, affected versions, and how to fix it. Continue reading 52M-Download protobuf.js Library Hit by RCE in Schema Handling
Hackers are exploiting a 5-year-old ShowDoc vulnerability (CVE-2025-0520) to deploy web shells, enabling RCE and full server takeover worldwide. Continue reading ShowDoc Vulnerability Patched in 2020 Now Used in Active Server Takeovers