#attack

OpenAI rotates macOS certs after Axios attack hit code-signing workflow

Apr 14, 2026 // 00:17

OpenAI is rotating potentially exposed macOS code-signing certificates after a GitHub Actions workflow executed a malicious Axios package during a recent supply chain attack. The […]

CPUID Supply Chain Attack: CPU-Z/HWMonitor Distributes Malware.

Apr 10, 2026 // 17:57

Cybercriminals compromised an API used by CPUID and altered the download links on their official site, distributing harmful software disguised as the popular CPU-Z and […]

ChipSoft, a healthcare IT firm, suffers ransomware attack, impacting systems and data security.

Apr 9, 2026 // 22:57

Dutch company ChipSoft, which provides software for healthcare, experienced a ransomware attack, forcing them to shut down their website and online services for both patients […]

Smart Slider update breach installs compromised WordPress/Joomla, acting as a supply chain attack.

Apr 9, 2026 // 20:37

Cybercriminals compromised the update mechanism for the Smart Slider 3 Pro plugin used on WordPress and Joomla, spreading a tainted version containing multiple secret entry […]

macOS malware spreads via Script Editor in ClickFix attack campaign.

Apr 9, 2026 // 18:39

A new attack campaign uses the Script Editor app to deliver Atomic Stealer malware to macOS users. This is a variation of the ClickFix attack, […]

ShareFile Hacking: Chain flaws for RCE before logging in. Progress ShareFile vulnerable to RCE attack chain.

Apr 2, 2026 // 17:17

A combination of two security weaknesses in Progress ShareFile, a platform for secure file sharing in businesses, can be used to steal files from affected […]

Citrix NetScaler memory vulnerability under active attack; critical flaw exploited.

Mar 31, 2026 // 00:17

Cybercriminals are taking advantage of a high-risk security weakness, identified as CVE-2026-3055, in Citrix NetScaler ADC and NetScaler Gateway devices to steal confidential information. Citrix […]

Malicious ads resembling tax services spread ScreenConnect malware. The attack leverages a Huawei driver to bypass endpoint detection and response (EDR).

Mar 24, 2026 // 20:13

Since January 2026, a widespread ad-based malware operation has been observed targeting individuals in the U.S. searching for tax documents. This campaign uses fake installers […]

Ghost attack leverages seven npm packages. Wallets and credentials targeted for crypto theft.

Mar 24, 2026 // 15:03

Security specialists have discovered new harmful npm packages created to pilfer cryptocurrency wallets and private information. ReversingLabs is calling this the Ghost operation. The packages […]

Trivy Supply Chain Attack: Docker, GitHub Impacted. OR Trivy Hacked: Docker & GitHub Supply Chain Affected.

Mar 24, 2026 // 10:58

The TeamPCP hackers, responsible for the Trivy supply-chain attack, kept targeting Aqua Security by uploading harmful Docker images and taking control of the GitHub organization […]

Previous 1 … 19 20 21 22 23 Next