Collaborate Disseminate
Attackers are constantly finding ways to take over accounts and push malicious packages to the npm registry, the (GitHub-operated) online repository for JavaScript and Node.js packages. But in this month alone, we witnessed the compromise of popular co… Continue reading After Shai-Hulud, GitHub tightens npm publishing security
SonicWall has released new firmware for its Secure Mobile Access (SMA) 100 series appliances, adding file-checking capabilities that help users remove known rootkit malware. The malware in question is the OVERSTEP user-mode rootkit, deployed by threat … Continue reading SonicWall adds rootkit removal capabilities to the SMA 100 series
MacOS users looking to download popular software such as LastPass, 1Password, After Effects, Gemini, and many others are in danger of getting saddled with the Atomic infostealer instead, LastPass has warned. The malware delivery campaign is ongoing and… Continue reading Malicious GitHub pages lure MacOS users into installing Atomic infostealer
If you’re running Fortra’s GoAnywhere managed file transfer solution and you haven’t updated to the latest available version for a while, do so now or risk getting your instance compromised via CVE-2025-10035. About CVE-2025-10035 CVE-2025-… Continue reading Unpatched Fortra GoAnywhere instances at risk of full takeover (CVE-2025-10035)
Between attackers exploiting 0-day and n-day vulnerabilities in the company’s firewalls and Secure Mobile Access appliances, SonicWall and its customers have had a tough year. And, unfortunately for them, the troubles are not over: unknown attack… Continue reading SonicWall says attackers compromised some firewall configuration backup files
Google has released a security update for the Chrome stable channel to fix a zero‑day vulnerability (CVE-2025-10585) reported by its Threat Analysis Group (TAG) on Tuesday. “Google is aware that an exploit for CVE-2025-10585 exists in the wild,” … Continue reading Google fixes actively exploited Chrome zero-day vulnerability (CVE-2025-10585)
Despite having been discovered and reported in 2014, the vulnerability that allows pixie dust attacks still impacts consumer and SOHO networking equipment around the world, Netrise researchers have confirmed. WPS and the pixie dust attack Wi-Fi Protect… Continue reading Many networking devices are still vulnerable to pixie dust attack
Microsoft and Cloudflare have disrupted a Phishing-as-a-Service operation selling the RaccoonO365 kit for stealing Microsoft 365 account credentials. “Using a court order granted by the Southern District of New York, [we] seized 338 websites asso… Continue reading Microsoft disrupts the RaccoonO365 Phishing-as-a-Service operation, names alleged leader
A potentially monumental supply chain attack is underway, thanks to a self-replicating worm-like payload that has been compromising packages published on the npm Registry. The worm has been dubbed “Shai-hulud” as it steals credentials from … Continue reading Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attack
All target organizations are different, but ransomware attackers are highly adaptive and appreciate – and will exploit – any mistake you make. The latest Akira ransomware attacks Managed security service providers and external incident resp… Continue reading Ransomware attackers used incorrectly stored recovery codes to disable EDR agents