CYBER ATTACK

A flaw in the Open VSX extension marketplace made its new pre-publish scanning pipeline very weak This article explores flaw open vsx. . The problem.

After finding a hacked Amazon Web Services (AWS) account, the European Commission has confirmed that its cloud-based infrastructure was attacked This.

Discover how At least since 2023, Silver Fox has been around. At first, the group only went after people who spoke Chinese. Then they moved into Southeast.

A South Asian bank is the latest victim of a targeted cyberattack that used two custom-made malware tools This article explores malware looking.

A new wave of cyberattacks is making banks and other financial institutions very worried This article explores cyberattacks making. . Threat actors are.

This morning, the official Telnyx Python SDK on PyPI was hacked This article explores pypi hacked teampcp. . TeamPCP has been running a.

VoidLink is a Linux malware framework that runs in the cloud and uses a rare hybrid architecture to stay hidden on infected systems This article explores.

Red Hat has sent out a serious security warning about bad code This article explores red hat code. . It was found in newer versions of the "xz".

The Cybersecurity and Infrastructure Security Agency (CISA) has added a serious flaw in Aqua Security's Trivy scanner to its Known Exploited.

The Internet Systems Consortium (ISC) has found three security holes in BIND 9. If attackers took advantage of this, they could slow down DNS, stop.

GhostClaw or Ghost loader is a growing malware campaign for macOS This article explores ghostclaw sneaky threat. . The infection follows a multi-step.

The infamous cybercrime group Silver Fox, which is based in China, has changed its methods This article explores silver fox cybercrime. . Instead of using.

Researchers found a complex supply chain attack that was aimed at the popular xz compression tool This article explores linux distributions compromised.

A new look at a local privilege escalation flaw in the Windows Error Reporting (WER) service makes it easy for hackers to get full SYSTEM access This.

Kiss Loader is a loader written in Python that is still being worked on This article explores kiss loader loader. . Researchers first noticed it on March.

Infiniti Stealer is a new piece of Mac malware that tricks people into clicking on fake Cloudflare human verification pages This article explores malware.

1inch, a decentralized exchange, found a threat that was always aimed at their support staff This article explores attacks infrastructure. . Attackers.

Cloud Software Group has sent out an important security bulletin that talks about two new security holes that have been found This article explores cloud.

The Internet Systems Consortium (ISC) has put out an important security advisory to let network administrators know about a serious security hole This.

A serious zero-click vulnerability in Anthropic's Claude Chrome Extension put more than 3 million users at risk of silent prompt-injection attacks This.

Anthropic accidentally made highly sensitive internal documents public, which showed that there is a powerful AI model that hasn't been released yet This.

Attackers are using GitHub Discussions to spread false warnings about security holes This article explores attackers using github. . The threat actors are.

The Internet Systems Consortium has put out a security warning about a serious flaw in its Kea DHCP server This article explores flaw kea dhcp. . If an.

Researchers at ReversingLabs have found a new operation This article explores attack ghost campaign. . The "Ghost campaign" is the name of this new wave.

The March 2026 security updates have been released to fix a number of holes in both enterprise and AI software systems. The most worrying problem in this.

Discover how The ClickFix social engineering method has come back with a lot of power. It tricks people into running harmful commands that quietly put.

On March 25, 2026, a hacker group called "Snow" from SnowTeam put up an ad on the Russian-speaking TierOne (T1) cybercrime forum This article explores.

Discover how VoidLink is a Linux malware framework that runs in the cloud and is written in Zig. It has a modular command-and-control structure with more.

Russian police have arrested the person they think is the administrator of LeakBase, a well-known international hacker forum This article explores.

The IDrive Cloud Backup Client for Windows has a serious local privilege escalation flaw that has been found. When the flaw is successfully used, an.