N-able warns of N-central auth bypass flaw exploited in attacks
N-able warns of N-central auth bypass flaw exploited in attacks By Bill Toulas August 3, 2026 01:00 PM N-able is warning customers that hackers are exploiting an authentication…
Search
Top stories
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages
…PyPI package with 1.1M monthly downloads hacked to push infostealer New npm supply-chain attack self-spreads to steal auth tokens Backdoored PyTorch Lightning package drops credential stealer Hackers compromise Axios…
Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
Russian hackers exploit Exchange OWA zero-day for long-term mailbox access By Ionut Ilascu July 29, 2026 07:44 PM The Russian state-sponsored hacking group Laundry Bear, also known as…
Fake Claude AI website delivers new 'Beagle' Windows malware
…The campaign was initially discovered by Malwarebytes , whose researchers say that the 'Pro' installer is a trojanized copy of Claude that works as expected but deploys a PlugX malware chain in the…
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
…Critical SQL injection flaw now targeted in attacks Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw Hackers bypass SonicWall VPN MFA due to incomplete patching Hackers exploit auth bypass flaw…
New OkoBot framework deploys 20 payloads to steal data, crypto
…However, the infection chain has been completely changed, with multiple attack stages and TookPS being used in the first phase to install and configure an SSH bot that delivered the other malicious…
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
…Organizations are urged to inventory Siemens S7 PLCs, install the latest security updates, block internet access, strengthen access controls, and monitor for unusual activity targeting these devices. Today's advisory follows a…
COLDCARD security audit phishing attack installs remote access tool
COLDCARD security audit phishing attack installs remote access tool By Lawrence Abrams August 5, 2026 01:49 PM A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and…
New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
…Earlier this year, researchers at Rapid7 found that Chaos was leveraged by Iranian state-backed hackers ‘MuddyWater’ to disguise their cyber-espionage operations as financially motivated attacks. More recent Chaos ransomware attacks…
TrickMo Android banker adopts TON blockchain for covert comms
…Android users are advised to only download software from Google Play, limit the number of installed apps on their phones, use apps only from reputable publishers, and ensure that Play Protect is…