Collaborate Disseminate
GhostAction supply chain attack hit 817 GitHub repositories, stealing 3,325 secrets including npm, PyPI, and DockerHub tokens. Continue reading GhostAction Attack Steals 3,325 Secrets from GitHub Projects
Chess.com confirms a limited data breach affecting 4,500 users after a third-party file transfer tool was compromised. No… Continue reading Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool
APT28 hackers deploy NotDoor backdoor via Microsoft Outlook macros, using OneDrive sideloading to steal data and evade detection. Continue reading Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook
Scattered Lapsus$ Hunters threaten Google, demanding that two security experts, Austin Larsen of Google’s Threat Intelligence Group and Charles Carmakal of Mandiant, be fired or they will leak alleged stolen Google data. Continue reading Scattered Lapsus$ Hunters Demand Google Fire Security Experts or Face Data Leak
Jaguar Land Rover is restoring systems after a cyberattack disrupted production and sales, with a hacker group previously… Continue reading Jaguar Land Rover Cyberattack Disrupts Production and Sales Operations
Cloudflare mitigated the largest DDoS attack ever recorded, an 11.5 Tbps flood that lasted 35 seconds without disrupting… Continue reading Cloudflare Mitigates Largest Ever Recorded DDoS Attack at 11.5 Tbps
Cloudflare confirms a Salesforce-linked data breach via Salesloft Drift, exposing customer support case data but leaving core systems… Continue reading Cloudflare Confirms Data Breach Linked to Salesforce and Salesloft Drift
Leaked ChatGPT chats reveal users sharing sensitive data, resumes, and seeking advice on mental health, exposing risks of… Continue reading Leaked ChatGPT Chats: Users Treat AI as Therapist, Lawyer, Confidant
Check Point reports Silver Fox APT using a signed WatchDog driver flaw to disable Windows security and deliver… Continue reading Silver Fox APT Exploits Signed Windows Driver to Deliver ValleyRAT
Amazon has disrupted a Russian APT29 watering hole campaign that used compromised sites to target Microsoft authentication with… Continue reading Amazon Disrupts Russian APT29 Watering Hole Targeting Microsoft Authentication