Collaborate Disseminate
OX Security reveals a new phishing campaign targeting GitHub developers. Scammers use fake OpenClaw token giveaways to trick users into connecting and draining their crypto wallets Continue reading Fake OpenClaw Token Giveaway Targets GitHub Devs with Wallet-Draining Scam
Hackers compromised Trivy, Checkmarx, and LiteLLM in a supply chain attack, stealing cloud credentials, tokens, and crypto wallet data from developers. Continue reading TeamPCP Hits Trivy, Checkmarx, and LiteLLM in Credential Theft Campaign
OVHcloud denies breach after hacker claims 600TB data theft affecting millions of sites, with experts doubting authenticity due to weak proof Continue reading OVHcloud Founder Denies Massive 590TB Data Breach Claims
The FBI has issued a warning about Iran-linked Handala Hack Group, targeting Windows users through fake versions of WhatsApp and Telegram. Continue reading FBI Warns of Iran’s Handala Hack Group Using Fake Apps to Spy on Windows Users
DarkSword exploit leak puts up to 270 million iPhones at risk, with hackers able to access data through… Continue reading DarkSword iPhone Exploit Leaked Online, Hundreds of Millions at Risk
CanisterWorm spreads via npm supply chain attack, hijacks developer accounts, targets Kubernetes clusters, and deploys destructive Kamikaze wiper payload. Continue reading New CanisterWorm Targets Kubernetes Clusters, Deploys “Kamikaze” Wiper
New research from LevelBlue reveals how a suspected North Korean operative landed a remote IT role to fund national weapons programmes. Continue reading North Korean Hacker Lands Remote IT Job, Caught After VPN Slip
Global crackdown dismantles Aisuru, KimWolf, JackSkid and Mossad botnets behind major DDoS attack campaigns targeting millions of devices worldwide. Continue reading Global Crackdown Dismantles 4 Botnets Behind Major DDoS Attacks
Cybersecurity researchers at Sublime Security have discovered a new scam that uses realistic, interactive JavaScript-based Zoom meeting invites to trick users into installing malware. Continue reading New Fake Zoom Meeting Invite Scam Spreads Malware on Windows PCs
Cybersecurity researchers at Bitdefender have discovered a malicious Windsurf IDE extension using the Solana blockchain to steal developer credentials. Continue reading Fake Windsurf IDE Extension Uses Solana Blockchain to Steal Developer Data