Collaborate Disseminate
Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations. Continue reading Armored Likho Hits Government, Energy Sectors With BusySnake Stealer
China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers. Continue reading UNK_MassTraction Exploits Roundcube Flaws Against US, Canadian Universities
Vietnamese police, aided by US Homeland Security and ACE, arrested seven people accused of running HiAnime, tied to $12.85M in ad revenue. Continue reading 7 Arrested Over World’s Top Anime Piracy Site HiAnime
Noma Labs details GitLost, a prompt injection flaw that made GitHub’s AI agent expose private repo data through a crafted public issue and guardrail failures. Continue reading GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
Spanish police and the FBI arrested an alleged Cyber Army of Russia Reborn member as international efforts against pro Russia cyberattacks continue worldwide. Continue reading FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member
Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware. Continue reading ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families
FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2 million TVs and streaming devices worldwide. Continue reading FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
The newly spotted PamStealer is spreading through a fake Maccy clipboard app and steal Mac passwords, browser data and clipboard content. Continue reading New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App
FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerability also under investigation. Continue reading FortiBleed Credential Theft Connected to INC and Lynx Ransomware
A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat. Continue reading Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation