LATEST

ZerOwl — Find Vulnerabilities Before Hackers Do
Autonomous AI Attacks: The Hugging Face Reality Check

Autonomous AI Attacks: The Hugging Face Reality Check

CYBER ATTACKZerowl

For several years, the forecast has been consistently predicting: AI lowers the skill barrier, AI writes novel malware, and AI will soon execute attacks.

North Korean WaterPlum Hackers Infect 30,000 Devices via Fake Job Interviews to Steal Crypto

North Korean WaterPlum Hackers Infect 30,000 Devices via Fake Job Interviews to Steal Crypto

CYBER ATTACKZerowl

North Korean cybercriminals, known as WaterPlum (formerly Contagious Interview), have infected over 30,000 devices in 100 countries, primarily targeting.

Linux Kernel Hit by Four Privilege Escalation Flaws Enabling Root Access

Linux Kernel Hit by Four Privilege Escalation Flaws Enabling Root Access

CYBER ATTACKZerowl

Four newly disclosed Linux kernel vulnerabilities could enable local attackers to corrupt kernel memory and elevate privileges to root on affected.

Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges

Steam Windows 0-Day Vulnerability Allows Users to Silently Escalate to Full SYSTEM Privileges

CYBER ATTACKZerowl

A newly disclosed Windows zero-day vulnerability affects the Steam Client Service, potentially allowing a standard local user to gain NT AUTHORITY\SYSTEM.

Hackers Turn Telegram Into a Command Center for HEAVYGRAM Surveillance Malware

Hackers Turn Telegram Into a Command Center for HEAVYGRAM Surveillance Malware

CYBER ATTACKZerowl

Heavygram is a Windows surveillance backdoor that leverages Telegram as a command and control center for attackers. Indicators of compromise (IoCs): -.

Hackers Hide PowerShell Malware in Registry, PNG and WAV Files to Deploy XMRig Miner

Hackers Hide PowerShell Malware in Registry, PNG and WAV Files to Deploy XMRig Miner

CYBER ATTACKZerowl

Researchers have discovered a sophisticated multi-stage cryptomining campaign that employs PowerShell, Registry-stored payloads, DNS TXT records, PNG.

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

A hacker downloaded 170 of CrowdSec's private GitHub repositories on May 22, using an employee's account that had just been terminated, according to.

Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link

Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link

CYBER ATTACKZerowl

WordPress administrators are being advised to upgrade after researchers revealed Click2Shell, an exploit chain capable of enabling remote code execution.

BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers

BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers

CYBER ATTACKZerowl

A new attack method called "BragJack" enables malicious browser extensions to seize trusted communication channels used by AI assistants in Chrome, Edge.

Top 5 this week

Page 38 of 316