Collaborate Disseminate
Cybersecurity researchers at 7AI have revealed a new Claude Fraud campaign in which hackers use fake AI extensions and Google ads to steal data from tech professionals. Continue reading ClickFix Attack Targets Devs with MacSync Malware via Fake Claude Tools
The new infostealer campaign spreads Vidar 2.0 via fake game cheats on GitHub and Reddit, stealing crypto, login tokens, and files while targeting young gamers ignoring security warnings Continue reading New Vidar 2.0 Infostealer Spreads via Fake Game Cheats on GitHub, Reddit
AWS Bedrock AI tool flaw allows data leaks via DNS queries in AgentCore Code Interpreter sandbox, exposing sensitive cloud data, researchers warn. Continue reading Researchers Find Data Leak Risk in AWS Bedrock AI Code Interpreter
FBI warns gamers after malware hidden in several Steam games stole browser data and drained cryptocurrency wallets between May 2024 and January 2026. Continue reading FBI Investigates Steam Games Linked to Malware and Crypto Wallet Theft
Cofense researchers warn of a phishing scam where attackers use LiveChat to impersonate Amazon and PayPal agents and steal credit card and MFA codes. Continue reading New Phishing Scam Uses LiveChat to Pose as Amazon and PayPal in Real Time
New XWorm 7.1 and Remcos RAT campaigns abuse trusted Windows tools to evade detection. The attacks exploit a WinRAR flaw and use process hollowing to spy on victims. Continue reading New XWorm 7.1 and Remcos RAT Attacks Abuse Windows Tools to Evade Detection
ShinyHunters claims it stole up to 1 petabyte of data from Telus Digital, including support recordings, code, and employee records after a breach. Continue reading ShinyHunters Claims 1 Petabyte Data Theft from Telecom Giant Telus
Qualys uncovers ‘CrackArmor’ vulnerabilities in AppArmor that could expose 12.6M Linux systems to root access and container escapes. Continue reading ‘CrackArmor’ Vulnerability in AppArmor Impacts 12.6M Linux Systems
US agencies race to meet a CISA deadline after a critical Cisco SD-WAN Flaw exposed federal networks to long-term intrusion and forced security action. Continue reading US Agencies Face CISA Deadline Over Critical Cisco SD-WAN Flaw
Scammers are hijacking popular security tools like Cloudflare to hide fake Microsoft 365 login pages. Learn how this new invisible phishing campaign bypasses antivirus software and how you can stay safe. Continue reading Hackers Use Cloudflare Human Check to Hide Microsoft 365 Phishing Pages