Collaborate Disseminate
An attacker used a contributor’s GitHub account to replace the download archives on five existing releases of OVHcloud’s command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets st… Continue reading Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks.
The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to p… Continue reading ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
A U.S. court on Monday granted the U.S. government’s request to detain a former OpenAI engineer accused of planting a recording device in an executive conference room at the company’s San Francisco office to allegedly steal sensitive secrets.
In a new… Continue reading Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that’s being used to distribute malware such as Legion Loader.
According to Forescout Research – Vedere Labs, ROMULUS is akin to a malware delivery service… Continue reading Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public.
According to a researcher who goes by the online alias bo… Continue reading Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a … Continue reading Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
The worst problems don’t always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.
This week ha… Continue reading ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file.
In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent’s prompt. Separately, Email-to-Case and Web-to-Case turn inbound customer mess… Continue reading From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemin… Continue reading Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic