LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Entities

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Entities

CYBER ATTACKZerowl

Government agencies, the military, and operators of critical infrastructure all use TrueConf, a popular video conferencing platform This article explores.

TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

A planned cyberattack that uses links to Russia is using the newly released DarkSword exploit kit to go after iPhone users This article explores planned.

New npm Supply Chain Attack Uses undicy-http to Deploy Screen-Streaming RAT and Browser Injector

New npm Supply Chain Attack Uses undicy-http to Deploy Screen-Streaming RAT and Browser Injector

CYBER ATTACKZerowl

The Node.js developer community has been infected by a malicious package called undicy-http This article explores linked lofygang threat. . This package.

Mercor AI Confirms Data Breach Following Lapsus$ Claims of 4TB Data Theft

Mercor AI Confirms Data Breach Following Lapsus$ Claims of 4TB Data Theft

CYBER ATTACKZerowl

The hacking group Lapsus$ has put Mercor's platform data up for auction on the dark web, where interested buyers can "make an offer." Threat actors say.

Malicious Telnyx Python Package On PyPI Targets Developer Credentials

Malicious Telnyx Python Package On PyPI Targets Developer Credentials

CYBER ATTACKZerowl

TeamPCP put two bad copies of Telnyx's official Python SDK on PyPI. The attack was set up so that it would automatically start when the library was.

Emerging Homoglyph Techniques Let Attackers Spoof Legitimate Websites

Emerging Homoglyph Techniques Let Attackers Spoof Legitimate Websites

CYBER ATTACKZerowl

Homograph attacks are common because people can't tell the difference between similar characters This article explores credentials homoglyph attacks.

CrewAI Vulnerabilities Allow Attackers to Bypass Sandboxes and Compromise Systems

CrewAI Vulnerabilities Allow Attackers to Bypass Sandboxes and Compromise Systems

CYBER ATTACKZerowl

CrewAI, a necessary tool for running multi-agent AI systems, has been found to have a number of serious security holes This article explores docker crewai.

Anthropic says that the Claude Code Source was leaked because of a mistake in npm packaging.

Anthropic says that the Claude Code Source was leaked because of a mistake in npm packaging.

A person made a mistake that let the source code for Anthropic's Claude Code get out This article explores leaked code codebase. . There are almost 2,000.

Top 5 this week

Page 126 of 317