Web infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access to “certain” internal Vercel systems. The incident stemmed […]
The data leak at Figure compromised 967,200 email accounts without relying on any software flaws. Understanding the implications of this, and why typical MFA solutions […]
An international effort involving law enforcement and private companies has stopped FrostArmada, an APT28 operation that hijacked local traffic from MikroTik and TP-Link routers to […]
The most actively used part of a company’s IT setup is the computer used by developers. This laptop is where login details are made, tried […]
Cybercriminals are bypassing phishing defenses in attacks targeting Microsoft users by exploiting the no-code development platform Bubble to create and host harmful web applications. Because […]
The hacking group TeamPCP is continuing its supply chain attacks, now targeting the widely used “LiteLLM” Python package on PyPI and claiming to have obtained […]
A current phishing scheme is targeting French-speaking businesses using deceptive job applications that install cryptocurrency miners and steal information. “The campaign uses heavily disguised VBScript […]
Security specialists have discovered new harmful npm packages created to pilfer cryptocurrency wallets and private information. ReversingLabs is calling this the Ghost operation. The packages […]
TeamPCP, the same cybercriminals behind the Trivy supply chain attack, have compromised two more GitHub Actions workflows to steal credentials. These workflows, both from the […]
Researchers have identified a malicious Go module, github.com, designed to harvest passwords and deploy the Rekoobe backdoor. Disclosed on February 27, 2026, the module impersonates the legitimate golang.org/x/crypto library to […]
© Bulletproof Servers. All rights reserved.