…Besides attributing the campaign to Russian hackers tracked as Storm-2945 - a sub-cluster of Midnight Blizzard, Microsoft identified two malware families called CornFlake and ChocoShell with capabilities for persistent access, credential…
…The script then searches up to three directory levels deep for the first available .app or .pkg installer, and if one is found, launches it using the macOS open command. Researchers observed…
…2026.3 HF1/build 2026.3.1.7) released on August 2, urging customers to install the patch immediately. N-able previously recommended admins to check for signs of compromise such as…
…Other campaigns abused shared ChatGPT and Grok conversations that conducted ClickFix attacks by impersonating software installation guides that instructed victims to execute commands that installed malware. The Validation Gap: Automated Pentesting Answers…
…An attacker can exploit the vulnerability to upload arbitrary files to the web server, including PHP scripts, which can lead to data theft, web shell installation, and complete website compromise by achieving…
…SonicWall released patches in versions 12.4.3-03453 and 12.5.0-02835, urging customers to install the updates immediately. While SonicWall confirmed that the flaws were exploited as zero-days…
…Researchers at managed security company Huntress found that the malicious Claude Artifact, downloaded 7,100 times before Anthropic removed it, directed visitors to websites that hosted a fake installer named ClaudeDesktop.exe…
…The researchers found that the DLL uses msiexec.exe to install vcredist_x64.dll, which is a package installer for the ScreenConnect remote access tool. After establishing a ScreenConnect session with the…
…GitHub highlighted Dependabot’s cooldown limitations against longer-term compromise, recommending the use of lockfiles for dependency pinning, restricted-scope tokens, and disabling unnecessary installation scripts in CI. PyPI blocks release poisoning…
Critical SimpleHelp flaw exploited to deploy new stealer malware By Bill Toulas June 29, 2026 10:00 AM Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to…