Tracked topic
…Malicious Edge extension abuses Native Messaging as bridge to malware Stealthy Mistic backdoor linked to ransomware access broker KongTuke New Shai-Hulud attack trojanizes 19 science-focused PyPI packages WordPress malware campaign…
…Stealthy Mistic backdoor linked to ransomware access broker KongTuke WordPress malware campaign hides payloads in Steam profiles Chinese hackers target telcos with new Linux, Windows malware Fake Claude AI website delivers new…
…New Checkmarx supply-chain breach affects KICS analysis tool Smart Slider updates hijacked to push malicious WordPress, Joomla versions Popular node-ipc npm package compromised to steal credentials Shai Hulud attack ships…
…PCPJack’s capabilities revolve mainly around credential theft, targeting cloud environments, developer systems, messenger apps, financial services, databases, SSH keys, Slack tokens, WordPress configs, OpenAI keys, Anthropic keys, Discord, DigitalOcean, and more…
…Microsoft warns of surge in ACR Stealer attacks on customers WordPress malware campaign hides payloads in Steam profiles New ClickLock macOS malware traps users into revealing login password Russian hackers trojanize WebEx…
…Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers BdThemes plugins supply-chain hack creates rogue WordPress admins Massive ChainDrop npm supply-chain attack infects hundreds of packages Online…
…Linux malware targets software developers Threat actor uses Microsoft Teams to deploy new “Snow” malware WordPress plugin suite hacked to push malware to thousands of sites Artificial Intelligence Backdoor Beagle Claude Malware…
…malware via Windows shortcut files Steam Workshop abused to spread malware via Wallpaper Engine app WordPress malware campaign hides payloads in Steam profiles ClickFix CryptoCurrency CryptoMiner Malware Steam XMRig Lawrence Abrams Lawrence…
…Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin Critical cPanel and WHM bug exploited as a zero-day, PoC now available Critical Nginx UI auth bypass flaw now actively exploited…
…7-Zip fixes RCE flaw exploitable with malicious archives WordPress Core "wp2shell" RCE flaws get public exploits, patch now HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload Claude Chrome…
