Collaborate Disseminate
Coyote Trojan becomes first malware to abuse Microsoft’s UI Automation in real attacks, targeting banks and crypto platforms with stealthy tactics. Continue reading Coyote Trojan First to Use Microsoft UI Automation in Bank Attacks
Microsoft reveals Chinese state-backed hacker groups, including Linen Typhoon, Violet Typhoon, and Storm-2603, are exploiting SharePoint flaws, breaching over 100 organisations. Discover threat actors, their tactics and Microsoft’s urgent security guid… Continue reading Microsoft Reveals Chinese State Hackers Exploiting SharePoint Flaws
Former Hunters International ransomware gang, now World Leaks, claims 1.3 TB Dell data breach, leaking over 400K files with internal tools and user data. Continue reading World Leaks Claims Dell Data Breach, Leaks 1.3 TB of Files
Fake npm website used in phishing attack to steal maintainer token, leading to malware in popular JavaScript packages like eslint-config-prettier. Continue reading Fake npm Website Used to Push Malware via Stolen Token
Microsoft has released new security updates to fix two serious vulnerabilities affecting on-premises SharePoint servers, warning that attackers… Continue reading Microsoft Confirms Hackers Exploiting SharePoint Flaws, Patch Now
PoisonSeed group tricks users into bypassing FIDO Keys by misusing QR code logins, highlighting new social engineering risk to secure MFA. Continue reading PoisonSeed Tricking Users Into Bypassing FIDO Keys With QR Codes
Cryptominer campaign runs for years using legit sites to spread malware, targeting Linux systems through known bugs and avoiding detection. Continue reading Years Long Linux Cryptominer Spotted Using Legit Sites to Spread Malware
Hackers are exploiting a new TeleMessage SGNL flaw that exposes sensitive data. CISA warns agencies to patch or stop using it by July 22. Continue reading New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers
Texas adoption agency suffers major data leak, exposing over 1.1M sensitive records including case notes, contact info, and internal communications to public without any security authentication or password. Continue reading Massive Data Leak at Texas Adoption Agency Exposes 1.1 Million Records
In an operation called Eastwood, authorities arrested two people and shut down more than 100 servers linked to the Russian group NoName057(16). Continue reading Police Shut Down 100 Servers Tied to Russian NoName057(16), Arrest 2