Collaborate Disseminate
TeamPCP, the threat actor behind the supply chain attack targeting Trivy, KICS, and litellm, has now compromised the telnyx Python package by pushing two malicious versions to steal sensitive data.
The two versions, 4.87.1 and 4.87.2, published to the … Continue reading TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files
Cybersecurity researchers have disclosed details of a now-patched bug impacting Open VSX’s pre-publish scanning pipeline to cause the tool to allow a malicious Microsoft Visual Studio Code (VS Code) extension to pass the vetting process and go live in … Continue reading Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks
Threat actors are using adversary-in-the-middle (AitM) phishing pages to seize control of TikTok for Business accounts in a new campaign, according to a report from Push Security.
Business accounts associated with social media platforms are a lucrative… Continue reading AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion
Rising geopolitical tensions are reflected (or in some cases preceded) by cyber operations, while technology itself has become politicized. Let’s admit it: we are in the middle of it.
Introduction: One tech power to rule them all is a thing of th… Continue reading We Are At War
A pro-Ukrainian group called Bearlyfy has been attributed to more than 70 cyber attacks targeting Russian companies since it first surfaced in the threat landscape in January 2025, with recent attacks leveraging a custom Windows ransomware strain coden… Continue reading Bearlyfy Hits 70+ Russian Firms with Custom GenieLocker Ransomware
Cybersecurity researchers have disclosed three security vulnerabilities impacting LangChain and LangGraph that, if successfully exploited, could expose filesystem data, environment secrets, and conversation history.
Both LangChain and LangGraph are ope… Continue reading LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks
A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks.
The strategic positioning activity, which involves implanting and maintaining stealthy a… Continue reading China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
Cybersecurity researchers have disclosed a vulnerability in Anthropic’s Claude Google Chrome Extension that could have been exploited to trigger malicious prompts simply by visiting a web page.
The flaw “allowed any website to silently inject prompts i… Continue reading Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website
Unmasking impostors is something the art world has faced for decades, and there are valuable lessons from the works of Elmyr de Hory that can apply to the world of defensive cybersecurity. During the 1960s, de Hory gained infamy as a premier forger, pa… Continue reading Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception
Some weeks in security feel loud. This one feels sneaky. Less big dramatic fireworks, more of that slow creeping sense that too many people are getting way too comfortable abusing things they probably shouldn’t even be touching.
There’s a l… Continue reading ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories