Collaborate Disseminate
DragonForce ransomware abused Microsoft Teams relay systems to hide a custom backdoor, steal files and encrypt systems at a US services firm. Continue reading DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity
Tenet researchers reveal how fake Sentry bug reports can trick AI coding agents into running code, exposing a new Agentjacking risk for developers today. Continue reading Agentjacking: Researchers Show How One Fake Bug Report Can Hijack AI Coding Agents
Hackers are using 15 malicious JetBrains plugins posing as AI coding assistants to steal DeepSeek, OpenAI, and other developer API keys. Continue reading 15 Malicious JetBrains Plugins Caught Stealing DeepSeek, OpenAI API Keys
Amos Stealer targets macOS users through fake downloads, stealing Keychain files, browser passwords, cookies, and developer configs for data theft. Continue reading Amos Stealer Targets macOS Keychain Files and Browser Passwords
Zimperium researchers discover a new mobile Trojan that hijacks clipboards, blocks bank calls, and takes complete control of Android devices. Continue reading New Rokarolla Android Trojan Found Targeting 217 Crypto and Banking Apps
The Handala hacking group claims it has targeted California Water Service, leaking 5GB of customer database and GPS network files in its latest infrastructure attack. Continue reading Handala Hacking Group Claims Breach of California Water Service
Over 50 Android apps on official stores spread MagicAd trojan, using system tricks to force background ads even after infected apps are closed. Continue reading Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores
Kaspersky found Argamal malware hidden in hentai game installers, giving hackers remote access through working games shared on adult sites and torrents. Continue reading Hackers Hide New Argamal Malware Inside Working Hentai Games
Over 20 Linux packages were compromised in the Atomic Arch campaign, which abuses AUR ownership transfers to drop rootkit-like malware. Continue reading Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware
Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up most victims. Continue reading ShinyHunters Target Universities in Oracle PeopleSoft Zero-Day Attack