Collaborate Disseminate
CloudSEK uncovers a sophisticated malware campaign where attackers impersonate PDFCandy.com to distribute the ArechClient2 information stealer. Learn how… Continue reading Fake PDFCandy File Converter Websites Spread Malware
8M UK healthcare worker records, including IDs and financial data, exposed due to a misconfigured staff management database… Continue reading UK Software Firm Exposed 1.1TB of Healthcare Worker Records
AI code tools often hallucinate fake packages, creating a new threat called slopsquatting that attackers can exploit in… Continue reading New “Slopsquatting” Threat Emerges from AI-Generated Code Hallucinations
NVIIA’s incomplete security patch, combined with a Docker vulnerability, creates a serious threat for organizations using containerized environments. This article explains the risks and mitigation strategies. Continue reading Incomplete Patch Leaves NVIDIA and Docker Users at Risk
Data breach at Laboratory Services Cooperative (LSC) exposed the sensitive health and personal information of 1.6 million individuals… Continue reading Data Breach at Planned Parenthood Lab Partner Exposes Info of 1.6M
Russian APT group Storm-2372 employs device code phishing to bypass Multi-Factor Authentication (MFA). Targets include government, technology, finance,… Continue reading Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing
TL;DR: A critical deserialization vulnerability (CVSS 9.8 – CVE-2025-27520) in BentoML (v1.3.8–1.4.2) lets attackers execute remote code without… Continue reading BentoML Vulnerability Allows Remote Code Execution on AI Servers
ReversingLabs reveals a malicious npm package targeting Atomic and Exodus wallets, silently hijacking crypto transfers via software patching. Continue reading npm Malware Targets Atomic and Exodus Wallets to Hijack Crypto Transfers
New Xanthorox AI hacking platform spotted on dark web with modular tools, offline mode, and advanced voice, image, and code-based cyberattack features. Continue reading Xanthorox AI Surfaces on Dark Web as Full Spectrum Hacking Assistant
NSA and global cybersecurity agencies warn fast flux DNS tactic is a growing national security threat used in phishing, botnets, and ransomware. Continue reading NSA and Global Allies Declare Fast Flux a National Security Threat