Collaborate Disseminate
Hackers are actively exploiting the Nginx Rift vulnerability affecting NGINX and F5 products, exposing servers to denial-of-service attacks. Continue reading Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products
The newly discovered Reaper malware bypasses Apple’s macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor. Continue reading New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords
Critical Claw Chain vulnerabilities in OpenClaw expose thousands of AI servers to data theft, backdoors, and admin-level attacks globally this week. . Continue reading Critical ‘Claw Chain’ Vulnerabilities Put Thousands of OpenClaw AI Servers at Risk
Hackers are hiding XWorm malware in PyInstaller files to bypass Windows security, steal data and remotely control devices through ads. Continue reading Hackers Use PyInstaller and AMSI Patching to Deliver XWorm RAT v7.4
Hackers are exploiting Outlook calendar invites and device code phishing to steal M365 session tokens, bypass MFA and breach enterprise accounts. Continue reading CalPhishing Scam Uses EvilTokens Kit, Outlook Invites to Steal M365 Sessions
Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,… Continue reading FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit
A new Darktrace report reveals how Chinese hackers use fake Apple and Yahoo sites and the FDMTP malware framework to spy on organisations. Continue reading China-Linked Twill Typhoon Uses Fake Apple and Yahoo Sites for Espionage
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak. Continue reading Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak. Continue reading Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak
Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm. Continue reading TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages