Collaborate Disseminate
UNC6783 hackers and extortionists impersonate support staff, using fake Okta login pages and social engineering to access corporate systems and steal sensitive data. Continue reading UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign
An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available. Continue reading Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
LayerX researchers have discovered how to bypass Claude Code’s safety rules using the CLAUDE.md file. This exploit allows… Continue reading Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks
macOS Malware notnullOSX targets crypto wallets over $10K, using fake apps, Terminal tricks, and backdoors to steal funds and sensitive data. Continue reading New macOS Malware notnullOSX Targets Crypto Wallets Over $10K
Operation Masquerade: The FBI and DoJ disrupted a Russian GRU campaign that hijacked routers via DNS attacks to spy on users and steal credentials. Continue reading Operation Masquerade: FBI Disrupts Russian Router Hacking Campaign
Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours. Continue reading Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure
Microsoft Threat Intelligence reveals how Russian hacking group Forest Blizzard uses home routers for DNS hijacking and spying. Continue reading Russian Forest Blizzard Hackers Hijack Home Routers for Global Spying
Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows. Continue reading New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
REF1695 hackers spread Monero mining malware via fake non-profit installers, using stealth tactics to evade detection and hijack systems for profit. Continue reading Hackers Pose as Non-Profit Developers to Deploy Monero Mining Malware
GrafanaGhost is a critical vulnerability in Grafana’s AI components that uses indirect prompt injection and protocol-relative URL bypasses to exfiltrate data. Continue reading GrafanaGhost Vulnerability Allows Data Theft via AI Injection