Collaborate Disseminate
A new phishing campaign is spreading XWorm 7.2 via malicious Excel files, hiding the malware in Windows processes, and using AES encryption to steal passwords and Wi-Fi keys. Continue reading Hackers Use Excel Exploit to Hide XWorm 7.2 in JPEG Files, Hijack PCs
Researchers demonstrate multiple attacks against major password managers, showing how compromised servers and design flaws can expose encrypted vault data. Continue reading Researchers Demonstrate 27 Attacks Against Major Password Managers
Cybersecurity researchers at Veracode reveal a typosquatting attack that disguises Pulsar RAT as images to bypass Windows security and antivirus programs. Continue reading Hackers Hide Pulsar RAT Inside PNG Images in New NPM Supply Chain Attack
Researchers at CyberProof have identified a new fake captcha campaign linked to the ClickFix operation. This stealthy infostealer targets over 25 browsers, cryptocurrency wallets like MetaMask, and gaming accounts by tricking users into executing malic… Continue reading New ClickFix Attack Targets Crypto Wallets and 25+ Browsers with Infostealer
Dell warns of a critical security hole in its RecoverPoint software exploited by hackers. Learn how to protect your data from the CVE-2026-22769 vulnerability and the new GrimBolt malware. Continue reading China-Linked Hackers Use Dell RecoverPoint Flaw to Drop GrimBolt Malware
Researchers at Hudson Rock have identified a live infection where an infostealer exfiltrated a victim’s OpenClaw configuration. The discovery highlights a shift in malware behaviour toward harvesting personal AI identity files. Continue reading Infostealer Found Stealing OpenClaw AI Identity and Memory Files
A technical mistake in the popular Chat & Ask AI app has left 300 million private messages from 25 million users exposed online. Discover what happened and how you can protect your personal data when using AI chatbots. Continue reading Firebase Misconfiguration Exposes 300M Messages From Chat & Ask AI Users
Forcepoint X-labs reveals how hackers use fake SSA emails and hijacked ScreenConnect tools to bypass Windows security to target UK, US, and Canadian organisations. Continue reading Hackers Abuse ScreenConnect to Hijack PCs via Fake Social Security Emails
Cybersecurity experts at Moonlock Lab have discovered a new ClickFix attack. Hackers are using hijacked Google Ads and fake Claude AI guides to trick Mac users into installing the data-stealing MacSync malware. Continue reading Google Ads and Claude AI Abused to Spread MacSync Malware via ClickFix
New investigation by Q Continuum reveals 287 Chrome extensions leaking the private browsing data of 37.4 million users to firms like Similarweb and Alibaba. Learn how these harmless tools turn your history into a product. Continue reading 287 Chrome Extensions Caught Harvesting Browsing Data from 37M Users