#exfiltrate


Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Sep 22, 2026 // 23:58

Cybersecurity researchers have disclosed details of a malicious npm package named “tw-pkgprobe-7731” that masquerades as a security tool targeting developers integrating Twilio into their applications, […]

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Sep 15, 2026 // 19:50

A flaw in Telegram Desktop let a bot’s message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said […]

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Sep 14, 2026 // 23:22

A flaw in Telegram Desktop let a bot’s message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said […]

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Sep 13, 2026 // 13:21

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using […]

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

Aug 27, 2026 // 19:40

Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration […]

New Manic Android malware can exfiltrate data through nearby devices

Aug 20, 2026 // 13:16

A new Android malware named Manic targeting users in multiple European countries has a fallback mechanism for exfiltrating data through nearby infected devices. The malware […]

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

Aug 18, 2026 // 23:28

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently […]

Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

Aug 11, 2026 // 17:31

A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without […]

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

May 13, 2026 // 11:16

Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that use the […]