Collaborate Disseminate
Spanish Guardia Civil and Group-IB arrest ‘GoogleXcoder,’ the 25-year-old Brazilian mastermind of the GXC Team, for selling AI-powered phishing kits and malware used to steal millions from banks across the US, UK, Spain, and Brazil. Continue reading Police Bust GXC Team, One of the Most Active Cybercrime Networks
Astaroth banking trojan has evolved to use GitHub and steganography for resilient C2, hiding its vital commands in images. Learn how this sophisticated malware employs fileless techniques to steal banking and crypto credentials from users across Latin … Continue reading Astaroth Trojan Uses GitHub Images to Stay Active After Takedowns
Just weeks after its release, OpenAI’s Guardrails system was quickly bypassed by researchers. Read how simple prompt injection attacks fooled the system’s AI judges and exposed an ongoing security concern for OpenAI. Continue reading OpenAI’s Guardrails Can Be Bypassed by Simple Prompt Injection Attack
Cybersecurity researcher Jeremiah Fowler discovered nearly 180,000 files, including PII and banking details, left exposed on an unprotected database linked to the Invoicely platform. Read about the identity theft and financial fraud risks for over 250,… Continue reading Invoicely Database Leak Exposes 180,000 Sensitive Records
An Authentication Bypass (CVE-2025-5947) in Service Finder Bookings plugin allows any unauthenticated attacker to log in as an administrator. Over 13,800 exploit attempts detected. Update to v6.1 immediately. Continue reading Auth Bypass Flaw in Service Finder WordPress Plugin Under Active Exploit
Fortinet warns of Stealit, a MaaS infostealer, now targeting Windows systems and evading detection by using Node.js’s SEA feature while hiding in fake game and VPN installers. Continue reading Stealit Malware Using Node.js to Hide in Fake Game and VPN Installers
Zimperium’s zLabs warns of ClayRat, a fast-spreading Android spyware targeting Russia. It hides in fake apps like TikTok and steals texts, calls records, and camera photos. Continue reading Fake TikTok and WhatsApp Apps Infect Android Devices with ClayRat Spyware
70,000 Discord users had government ID photos and private data exposed via a third-party vendor breach. See Discord’s full response and critical security steps to protect your identity. Continue reading Discord Says Hackers Stole 70,000 ID Photos, Dismisses Extortion Claims
Forcepoint X-Labs reports a surge in sophisticated email attacks using obfuscated JavaScript and steganography to deliver dangerous RATs and info-stealers like Formbook and Agent Tesla. Learn how to defend against the threat. Continue reading Your Shipment Notification is Now a Malware Dropper
FortiGuard Labs reveals Chaos-C++, a new Chaos ransomware variant that deletes files over 1.3 GB instead of encrypting them and uses clipboard hijacking to steal cryptocurrency. Continue reading New Chaos-C++ Ransomware Targets Windows by Wiping Data, Stealing Crypto