Collaborate Disseminate
Google adds Device Bound Session Credentials (DBSC) to Chrome 146, using hardware keys to block infostealer use of stolen session cookies on Windows. Continue reading Google Chrome Update Disrupts Infostealer Cookie Theft
ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware. Continue reading GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware
UNC6783 hackers and extortionists impersonate support staff, using fake Okta login pages and social engineering to access corporate systems and steal sensitive data. Continue reading UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign
An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available. Continue reading Adobe Reader Zero-Day Exploited to Steal Data via Malicious PDFs
LayerX researchers have discovered how to bypass Claude Code’s safety rules using the CLAUDE.md file. This exploit allows… Continue reading Claude Code Can Be Manipulated via CLAUDE.md to Run SQL Injection Attacks
macOS Malware notnullOSX targets crypto wallets over $10K, using fake apps, Terminal tricks, and backdoors to steal funds and sensitive data. Continue reading New macOS Malware notnullOSX Targets Crypto Wallets Over $10K
Operation Masquerade: The FBI and DoJ disrupted a Russian GRU campaign that hijacked routers via DNS attacks to spy on users and steal credentials. Continue reading Operation Masquerade: FBI Disrupts Russian Router Hacking Campaign
Microsoft researchers have uncovered a fast-moving group, Storm-1175, launching high-speed Medusa ransomware attacks against healthcare and education sectors in the UK, US, and Australia by exploiting security flaws in as little as 24 hours. Continue reading Storm-1175 Deploys Medusa Ransomware Within 24 Hours of Flaw Disclosure
Microsoft Threat Intelligence reveals how Russian hacking group Forest Blizzard uses home routers for DNS hijacking and spying. Continue reading Russian Forest Blizzard Hackers Hijack Home Routers for Global Spying
Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows. Continue reading New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto