Collaborate Disseminate
Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and expose tokens across major projects today. Continue reading ‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
Microsoft researchers warn of a new dual-action cryptocurrency clipper (CryptoBandits Malware) spreading through USB devices to alter wallet addresses and steal crypto assets. Continue reading New CryptoBandits Malware Uses USB Drives and Tor to Steal Crypto
Two teenagers face sentencing after admitting to a massive Scattered Spider cyberattack that hit Transport for London (TfL) and US healthcare networks. Continue reading 2 Scattered Spider-Linked Hackers Plead Guilty Over £39M TfL Cyberattack
Apple has released a security update to patch a Beats Studio Buds flaw that let nearby hackers listen to conversations through the microphone. Continue reading Beats Studio Buds Flaw Could Let Nearby Attackers Eavesdrop on Users
Around 3 million Texas licence holders face a data breach after hackers targeted a third-party vendor, exposing driver’s licences and passport numbers. Continue reading Texas Parks and Wildlife Data Breach Affects Over 3M License Customers
A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets. Continue reading Scammers Use Fake GitHub Stars, VirusTotal Reviews to Spread Crypto Clipper
Icarus extortion group used a legacy Klue Battlecards credential to bypass security and steal bulk Salesforce records from affected companies. Continue reading Salesforce Disables Klue Integration After OAuth Token Theft Hits Customer Data
Nintendo America employee records were exposed via TinyPulse after Shadowbyt3 claimed theft of HR files, tax forms, bank data, and staff survey responses. Continue reading Nintendo America Employee Data Exposed After Shadowbyt3$ Targets TinyPulse
Cybersecurity experts warn that active hacking networks are using fake hotel bookings, cloned websites, and live chat features to scam FIFA World Cup 2026 fans. Continue reading FIFA World Cup 2026: Hackers Target Football Fans With Fake Tickets Sites
International law enforcement dismantled TA569’s SocGholish infrastructure, taking down over 100 C2 servers and remediating nearly 15,000 compromised websites. Continue reading Operation Endgame Disrupts SocGholish Malware Infrastructure