Collaborate Disseminate
OpenAI rotates macOS certificates after downloading a compromised Axios version, urging users to update apps before revoked certificates are blocked in May 2026. Continue reading OpenAI Rotates macOS Certificates Following Axios Supply Chain Breach
BITTER APT spreads ProSpy and ToSpy via Signal, Google, and Zoom lures, targeting journalists through LinkedIn and iMessage spearphishing. Continue reading BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware
OpenSSF warns hackers impersonate Linux Foundation leaders on Slack, tricking developers into installing malware that can compromise entire systems. Continue reading OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries. Continue reading Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand
A lone hacker used Claude Code and GPT-4.1 to exfiltrate hundreds of millions of Mexican citizen records from 9 government agencies. Continue reading Hacker Used Claude Code, GPT-4.1 to Exfiltrate Hundreds of Millions of Mexican Records
Signal messages may persist in iPhone notification data, enabling FBI access even after deletion, a court case reveals. Continue reading FBI Recovers Deleted Signal Messages Through iPhone Notifications
Google adds Device Bound Session Credentials (DBSC) to Chrome 146, using hardware keys to block infostealer use of stolen session cookies on Windows. Continue reading Google Chrome Update Disrupts Infostealer Cookie Theft
ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware. Continue reading GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware
UNC6783 hackers and extortionists impersonate support staff, using fake Okta login pages and social engineering to access corporate systems and steal sensitive data. Continue reading UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign
An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available. Continue reading Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs