Collaborate Disseminate
Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally. Continue reading Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs
Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity. Continue reading AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining
Wiz found GhostApproval symlink flaws in major AI coding assistants that could hide sensitive file targets, bypass approval checks and enable system access too. Continue reading GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces
DuckDuckGo’s browser now blocks most YouTube ads by default on supported devices. Here’s how it works, which platforms support it, and its limits. Continue reading DuckDuckGo Now Blocks Most YouTube Ads Right Inside Its Browser
Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations. Continue reading Armored Likho Hits Government, Energy Sectors With BusySnake Stealer
China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers. Continue reading UNK_MassTraction Exploits Roundcube Flaws Against US, Canadian Universities
Vietnamese police, aided by US Homeland Security and ACE, arrested seven people accused of running HiAnime, tied to $12.85M in ad revenue. Continue reading 7 Arrested Over World’s Top Anime Piracy Site HiAnime
Noma Labs details GitLost, a prompt injection flaw that made GitHub’s AI agent expose private repo data through a crafted public issue and guardrail failures. Continue reading GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
Spanish police and the FBI arrested an alleged Cyber Army of Russia Reborn member as international efforts against pro Russia cyberattacks continue worldwide. Continue reading FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member
Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware. Continue reading ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families