npub1xm6q...7acu 4 months ago

ShadyPanda browser extensions amass 4.3M installs in malicious campaign

BleepingComputer

ShadyPanda browser extensions amass 4.3M installs in malicious campaign

A long-running malware operation known as "ShadyPanda" has amassed over 4.3 million installations of seemingly legitimate Chrome and Edge browser e...

npub1xm6q...7acu 4 months ago

New Startup Mate Launches With AI-Driven Security Operations Platform https://www.darkreading.com/cybersecurity-operations/new-startup-mate-launches-with-ai-driven-security-operations-platform

npub1xm6q...7acu 4 months ago

Shai-hulud 2.0 Variant Threatens Cloud Ecosystem https://www.darkreading.com/cyberattacks-data-breaches/shai-hulud-variant-cloud-ecosystem

npub1xm6q...7acu 4 months ago

Bloody Wolf APT Expands to Central Asia, Deploys NetSupport RAT via Custom Java Droppers and Geo-Fencing

Daily CyberSecurity

Bloody Wolf APT Expands to Central Asia, Deploys NetSupport RAT via Custom Java Droppers and Geo-Fencing

Bloody Wolf APT is targeting Central Asia using custom Java droppers to deploy the NetSupport RAT. The group uses geo-fencing and fake Ministry of ...

npub1xm6q...7acu 4 months ago

High-Severity GeoServer Flaw (CVE-2025-58360) Allows Unauthenticated XXE for File Theft and SSRF

Daily CyberSecurity

High-Severity GeoServer Flaw (CVE-2025-58360) Allows Unauthenticated XXE for File Theft and SSRF

GeoServer patched a High-severity XXE flaw (CVE-2025-58360, CVSS 8.2) in its WMS GetMap operation. The flaw allows unauthenticated remote attackers...

npub1xm6q...7acu 4 months ago

Operation Hanoi Thief: Hackers Use ‘Pseudo-Polyglot’ LNK/Image to Deploy LOTUSHARVEST Stealer via DLL Sideloading

Daily CyberSecurity

Operation Hanoi Thief: Hackers Use 'Pseudo-Polyglot' LNK/Image to Deploy LOTUSHARVEST Stealer via DLL Sideloading

Operation Hanoi Thief targets Vietnam with a pseudo-polyglot LNK/image file that executes malicious code via ftp.exe. The attack deploys LOTUSHARVE...

npub1xm6q...7acu 4 months ago

North Korea’s “Contagious Interview” Floods npm with 200 New Packages, Using Fake Crypto Jobs to Deploy OtterCookie Spyware

Daily CyberSecurity

North Korea's "Contagious Interview" Floods npm with 200 New Packages, Using Fake Crypto Jobs to Deploy OtterCookie Spyware

North Korean APTs added 197 malicious npm packages to the "Contagious Interview" campaign. The operation uses fake crypto job assignments t...

npub1xm6q...7acu 4 months ago

New TangleCrypt Packer Hides EDR Killer, But Coding Flaws Cause Ransomware to Crash Unexpectedly

Daily CyberSecurity

New TangleCrypt Packer Hides EDR Killer, But Coding Flaws Cause Ransomware to Crash Unexpectedly

WithSecure exposed TangleCrypt, a new ransomware packer that uses LZ78/XOR and embedded PE resources to hide the STONESTOP EDR killer. However, cod...

npub1xm6q...7acu 4 months ago

Fragging Your Data: Fake ‘Battlefield 6’ Cracks & Trainers Spread Infostealers

Daily CyberSecurity

Fragging Your Data: Fake 'Battlefield 6' Cracks & Trainers Spread Infostealers

Cybercriminals are using fake Battlefield 6 cracks and trainers to deploy infostealers. Avoid "InsaneRamZes" & "RUNE" torrents to p...

npub1xm6q...7acu 4 months ago

Security Alert: Apache SkyWalking Stored XSS Vulnerability (CVE-2025-54057)

Daily CyberSecurity

Security Alert: Apache SkyWalking Stored XSS Vulnerability (CVE-2025-54057)

Apache SkyWalking patches a Stored XSS flaw (CVE-2025-54057) affecting versions 10.2.0 and older. Upgrade to v10.3.0 to secure your APM dashboards.

npub1xm6q...7acu 4 months ago

Iran-Nexus Threat Actor UNC1549 Takes Aim at Aerospace https://www.darkreading.com/cybersecurity-operations/iran-nexus-threat-actor-unc1549-takes-aim-aerospace

npub1xm6q...7acu 4 months ago

Critical Ray AI Flaw Exposes Devs via Safari & Firefox (CVE-2025-62593)

Daily CyberSecurity

Critical Ray AI Flaw Exposes Devs via Safari & Firefox (CVE-2025-62593)

Critical Ray AI flaw (CVE-2025-62593) allows RCE via DNS rebinding on Safari & Firefox. Chrome is immune. Update to Ray v2.52.0 immediately.

npub1xm6q...7acu 4 months ago

'Matrix Push' C2 Tool Hijacks Browser Notifications https://www.darkreading.com/threat-intelligence/matrix-push-c2-tool-hijacks-browser-notifications-phishing

npub1xm6q...7acu 4 months ago

Malicious LLMs empower inexperienced hackers with advanced tools

BleepingComputer

Malicious LLMs empower inexperienced hackers with advanced tools

Unrestricted large language models (LLMs) like WormGPT 4 and KawaiiGPT are improving their capabilities to generate malicious code, delivering func...

npub1xm6q...7acu 4 months ago

China's 'PlushDaemon' Hackers Infect Routers to Hijack Software Updates https://www.darkreading.com/endpoint-security/chinese-apt-routers-hijack-software-updates

npub1xm6q...7acu 4 months ago

Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks

Malwarebytes

Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks

Scammers are stepping up their game for the holidays, impersonating brands to trick people into handing over their accounts.

npub1xm6q...7acu 4 months ago

New Security Tools Target Growing macOS Threats https://www.darkreading.com/vulnerabilities-threats/new-security-tools-target-growing-macos-threats

npub1xm6q...7acu 4 months ago

Critical Alert: Apache Kvrocks ‘RESET’ Command Flaw Grants Admin Privileges

Daily CyberSecurity

Critical Alert: Apache Kvrocks 'RESET' Command Flaw Grants Admin Privileges

Critical Apache Kvrocks flaw (CVE-2025-59790) grants admin privileges via RESET command. Update to v2.14.0 now to prevent unauthorized access and l...

npub1xm6q...7acu 4 months ago

Shai-Hulud Returns: Over 300 NPM Packages and 21K Github Repos infected via Fake Bun Runtime Within Hours https://www.reddit.com/r/netsec/comments/1p5d4pm/shaihulud_returns_over_300_npm_packages_and_21k/

npub1xm6q...7acu 4 months ago

Is Your Android TV Streaming Box Part of a Botnet?

Is Your Android TV Streaming Box Part of a Botnet? – Krebs on Security