Google’s Chrome 146 for Windows now includes Device Bound Session Credentials (DBSC) to defend against malware that steals session cookies. A future Chrome update will […]
A new attack campaign uses the Script Editor app to deliver Atomic Stealer malware to macOS users. This is a variation of the ClickFix attack, […]
A Russian cyber espionage group, APT28 (also Forest Blizzard and Pawn Storm), is reportedly conducting spear-phishing attacks against Ukraine and its allies, using a newly […]
Cybercriminals are taking advantage of the recent Claude Code source code disclosure by spreading the Vidar data-stealing malware through deceptive GitHub repositories. Claude Code is […]
A new malware, CrystalRAT, offered as a service, is being advertised on Telegram. It allows remote control, data exfiltration, keylogging, and clipboard manipulation. This malware […]
Attackers have compromised TrueConf video conferencing servers by exploiting a previously unknown vulnerability. This allows them to run any file they choose on all devices […]
A new Android threat called NoVoice was discovered on the Google Play store. It was hidden in over 50 apps, resulting in at least 2.3 […]
Attackers gained control of the npm account for the Axios package, a widely used JavaScript HTTP client downloaded over 100 million times weekly, to distribute […]
A novel data-stealing malware, Infinity Stealer, is targeting macOS devices. It employs a Python-based code hidden within an executable built with the Nuitka compiler. The […]
TeamPCP hackers broke into the Telnyx package on the Python Package Index today. They uploaded harmful versions containing credential-stealing malware hidden in a WAV file. […]
© Bulletproof Servers. All rights reserved.