Articles
Dive into expert-written content covering the latest cybersecurity threats, trends, and best practices. Stay ahead with clear, actionable guidelines and best practices for cybersecurity professionals.
Claude for Chrome flaw lets other extensions read Gmail and Google Docs
Two unpatched Claude for Chrome flaws let rogue extensions forge clicks that access Gmail, Docs, and Calendar data.
Jailbroken Google Gemini spun up new C2 server for Russian fraudster in six minutes
A jailbroken Gemini AI performed 90% of a Russian fraudster's botnet operation including spinning up a C2 server in six…
AsyncAPI npm packages with millions of weekly downloads compromised via GitHub actions
Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.
LabubaRAT masquerades as NVIDIA software to control Windows hosts
A new Rust-based RAT called LabubaRAT disguises itself as NVIDIA software and supports multi-channel C2 communications.
German textile firm files for insolvency after cyberattack shut production for six weeks
German manufacturer ZEGO-TVZ filed for insolvency after a March cyberattack halted production for nearly six weeks.
Grok build uploads entire git repositories to xAI cloud storage
Grok Build CLI caught uploading entire Git repositories to xAI cloud storage exposing secrets
Popa botnet linked to NetNut residential proxy service infects millions of Android TV boxes
FBI identifies Popa Android botnet infecting millions of TV boxes through NetNut residential proxy service