Snowflake CI workflow injection leaks Jira tokens through crafted issues
Wiz's Red Agent found a GitHub Actions injection in a Snowflake repository that exposed Jira credentials via a specially crafted issue.
The Latest
StubMaker typosquats Ruby libraries to drain browser wallets
OpenSourceMalware is tracking StubMaker, a campaign of 16 typosquatted RubyGems packages that drops a Windows infostealer on developers.
WordPress form plugin flaw lets strangers plant backdoor PHP files
A critical arbitrary file upload bug in Forminator Forms, running on more than 600,000 WordPress sites, lets unauthenticated attackers execute…
Evooo1Bot borrows Mirai code to rent out routers as proxies
Fortinet's FortiGuard Labs uncovered Evooo1Bot, a Mirai-derived Linux botnet that turns hacked edge devices into SOCKS5 proxies.
Azure directory dumps put McDonald’s and TCS staff data up for sale
A seller posting employee directories claims they came from Azure tenants of nine companies, and Hudson Rock says the samples…
Order tracking gap exposes SafePal buyers’ names and home addresses
SafePal says an authorization flaw in its order tracking plugin exposed the personal details of about 39,798 customers, but no…
DNS rebinding trick puts Ray AI clusters within browser attackers’ reach
CISA added an actively exploited Ray AI framework flaw to its KEV catalog, citing evidence of active exploitation in the…
Unauthenticated GraphQL injection lets strangers wipe GitLab projects
GitLab shipped emergency patches for a critical GraphQL code injection flaw that lets unauthenticated attackers modify or delete public projects.
Fake captchas on 2,000 hacked WordPress sites push malware
Check Point links nearly 2,000 hacked WordPress sites to fake-captcha malware delivery.
TWINLOOT hides inside Microsoft cloud to swipe logins and roam
New Windows implant TWINLOOT abuses SharePoint and Teams to steal credentials and move laterally.
US charges 17 Iran-linked hackers in decade-old campus theft case
US prosecutors charge 17 Iran-linked hackers over a decade of university and corporate data theft.
Microsoft shadows MacSync stealer as its domains keep rotating
Microsoft tracks 30-plus rotating domains tied to the MacSync stealer through behavioral pivots.
MLflow and FUXA flaws draw scans aimed at cloud secrets
Scanners are hammering MLflow and FUXA servers as attackers chase cloud credentials and code execution.
Medusa ransomware tops 500 victims as agencies update warning
Updated FBI, CISA, and HHS guidance puts Medusa ransomware victims past 500 organizations.
Spotlight
Copilot reveals the trick that lets one click drain connected apps
Varonis shows how one click on a crafted link can drain data from connected apps in Microsoft Copilot Personal.
Four exploited flaws land on CISA urgent patch list
CISA adds four actively exploited flaws covering macOS, SharePoint, vCenter, and Microsoft IKE to its urgent patch catalog.
PATCHCORD backdoor rides fake VPN installers into Afghan telecoms
Fake VPN installers are delivering a new backdoor to Afghan telecoms and South Asian infrastructure, with ties to APT36.
Sable Squirrel spends $7M on expired domains to fuel malware
Infoblox tracks actors buying expired domains to inherit trust and traffic for malware, scams, and C2.
Features
SAP Commerce Cloud flaw under attack three days after patch
SAP Commerce Cloud's CVSS 10 flaw is under attack just three days after the patch shipped.
UK criminal records office reprimanded over seven-month breach
The UK criminal records office got a reprimand after attackers kept access to its CMS for seven months.
Fraud network of 94 call centers dismantled across Ukraine
Ukraine's police shut 94 scam call centers and seized millions in cash and equipment.
Spectre attacks still work on commercial RISC-V silicon
Researchers prove commercial RISC-V chips are still vulnerable to Spectre attacks.
Insider contractor gets two years for Brightly Software extortion
A contractor got two years for extorting Brightly Software with stolen payroll data.
$58 certificate unlocks SCCM takeover chain in XM Cyber demo
XM Cyber chains four SCCM flaws to SYSTEM using a $58 certificate.