Collaborate Disseminate
Cybercriminals are using SEO poisoning and fake Gemini and Claude installer sites to infect developers with fileless malware and steal data. Continue reading Trojanized Gemini and Claude Installers Target Developers Via SEO Poisoning
Anthropic says its Claude Mythos AI identified more than 10,000 software vulnerabilities in one month, including critical flaws in open-source code. Continue reading Claude Mythos AI Identified 10,000+ Software Vulnerabilities in One Month
Hackers compromised FBI Chief Kash Patel’s clothing store in a ClickFix attack that tricked macOS users into installing infostealer malware. Continue reading FBI Chief Kash Patel’s Clothing Store Hacked in ClickFix Infostealer Attack
Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers. Continue reading RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers
FBI warns of Kali365, a PaaS scam kit that lets cybercriminals bypass MFA and hijack Microsoft 365 accounts without passwords. Continue reading FBI Warns of Kali365 Phishing Service Targeting Microsoft 365 Account
SafeDep uncovered the Megalodon attack targeting 5,561 GitHub repositories with malicious CI workflows and cloud credential theft. Continue reading 5,561 GitHub Repositories Hit by Megalodon Supply Chain Attack in Six Hours
Deleted Google API Keys remain active for up to 23 minutes after deletion, exposing GCP, Gemini, BigQuery, and Maps data to attackers. Continue reading Deleted Google API Keys Remain Active up to 23 Minutes, Study Finds
Cybersecurity researchers expose a 10-month global Android malware campaign using fake apps to secretly charge users through premium SMS bills. Continue reading Android Malware Spotted Subscribing Victims to Paid Services Without Consent
Despite Internet Explorer’s retirement, hackers are abusing the legacy MSHTA utility in stealthy fileless malware attacks targeting Windows users. Continue reading Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks
GitHub Breach: TeamPCP stole 3,800 internal repositories through a malicious VS Code extension and is now selling the data online for $95,000. Continue reading GitHub Breach: TeamPCP Steals 3,800 Repositories via VS Code Extension