Collaborate Disseminate
Forcepoint’s X-Labs reports an 11-step DHL phishing scam that uses fake OTP codes and EmailJS to harvest user credentials and device telemetry. Continue reading New DHL Phishing Scam Uses 11-Step Attack Chain to Steal Passwords
Security experts have found a high-severity flaw named Pack2TheRoot in PackageKit that allows hackers to gain full root access on multiple Linux distributions. Continue reading Pack2TheRoot: 12-Year-Old Linux PackageKit Flaw Enables Full Compromise
CISA and NCSC warn that FIRESTARTER, a Linux-based backdoor, targets Cisco Firepower devices, evades patches, and enables persistent access even after firmware updates. Continue reading New Linux FIRESTARTER Backdoor Targets Cisco Firepower Devices
UNC6692 hackers exploit Microsoft Teams with fake IT alerts to deploy SNOW malware, steal credentials, and breach corporate networks in advanced attacks. Continue reading UNC6692 Hackers Exploit Microsoft Teams to Deploy SNOW Malware
New version of Vidar infostealer spreads via fake CAPTCHAs, hides in JPEG and TXT files, uses fileless attacks and steals browser, crypto wallet data. Continue reading Vidar Infostealer Spreads via Fake CAPTCHAs, Hides in JPEG and TXT Files
Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft. Continue reading Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation
Research from Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts. Continue reading Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts
Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows Continue reading New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk
GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools. Continue reading TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware
French police arrest HexDex hacker, a 20-year-old suspect accused of mass data theft and leaks targeting government, sports groups, and firms. Continue reading French Police Arrest HexDex Hacker Over Mass Data Theft and Leaks