…Yesterday, BleepingComputer reported that fake data breach disclosures had been submitted to Maine's official breach notification portal impersonating Discord and the multiplayer social virtual reality platform VRChat. At the time, VRChat…
…platform notes that the 'durabletask' - a repository in Microsoft's Azure organization on GitHub, was compromised in May, indicating that an incomplete cleanup allowed the threat actor to return with a new…
…Unexpected .jsp webshell files in WebLogic application directories Unauthorized files or binaries staged in PSEMHUB transaction folders Suspicious directories such as logs, persistantstorage, or scratchpad Recently modified XML files that could be…
…push infostealer New npm supply-chain attack self-spreads to steal auth tokens Backdoored PyTorch Lightning package drops credential stealer Hackers compromise Axios npm package to drop cross-platform malware Backdoored Telnyx…
…factor authentication (2FA)." After a wave of user reports regarding these attacks hit social media platforms, Andy Stone, Meta's vice president of communications, replied to one of the affected users, stating…
…If that evaluation changes based on new evidence from the ongoing investigation, Grafana Labs promised to notify impacted customers directly. The Validation Gap: Automated Pentesting Answers One Question. You Need Six. Automated…
…However, INCIBE posted in February about an ongoing doxing operation and stated that there was no direct compromise of their systems, but rather a targeted collection and publication of data impacting key…
…New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware grabs macOS data via ClickFix lures Popular node-ipc npm package compromised to steal credentials Shai Hulud attack…
…DAEMON Tools trojanized in supply-chain attack to deploy backdoor New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud…