Tracked topic
GitHub is a web-based platform for hosting and collaborating on software using Git version control, offering features such as pull requests.
…attacks on customers New ClickLock macOS malware traps users into revealing login password Nearly 300 GitHub repos pose as legit software to push malware Gaming Info Stealer Information Stealer Malware RAT Remote…
…100 Pro subscription to challenge Claude Claude Code leak used to push infostealer malware on GitHub FBI warns of Kali365 phishing service targeting Microsoft 365 accounts AI Anthropic Claude Claude Code Claude…
…7-Eleven confirms data breach claimed by the ShinyHunters gang Karakurt extortion gang ‘cold case’ negotiator gets 8.5 years in prison Grafana says stolen GitHub token let hackers steal codebase West…
…The driver is loaded from another kernel driver named ‘DriverLoader’ (fsdiskbit.sys) signed using a leaked certificate from the GitHub PastDSE project. The driver enables the malware to hide processes via Windows…
…It has been observed in ClickFix attacks, promoted through Windows fixes , TikTok videos , and GitHub . Last year, the developer released a new version with upgraded capabilities. ACSC notes that Vidar deletes its…
…OkoBot reaches victims through ClickFix attacks or malicious GitHub repositories pretending to host legitimate software tools. In one case, a repository claimed to offer SQL Server Management Studio (SSMS) but dropped a…
…They tested multiple prompts across Cursor, Windsurf, GitHub Copilot, Cline, Gemini CLI, and OpenClaw. Models hallucinated identical names up to 85% of the time for repository requests. They hallucinated identical names 100…
…According to a report by Unit 42 posted on GitHub, the attack begins with a phishing email containing an "Employee Survey" lure and a malicious PDF attachment. Shortly after opening the document…
…According to Socket, the exfiltrated data includes Paysafe API keys, AWS keys, GitHub tokens, npm tokens, hostname, username, and metadata about API usage. The data theft module in the npm packages attempts…
…SIEM and EDR rules so threats stop slipping by detection. Get the whitepaper Related Articles: GitHub disables Microsoft repos pushing password-stealing malware New Shai-Hulud attack trojanizes 19 science-focused PyPI…