#news


EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

May 1, 2026 // 00:12

A sophisticated, high-resilience malicious campaign was identified by Atos Threat Research Center (TRC) in March 2026. This operation specifically targets the high-privilege professional accounts of […]

New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

May 1, 2026 // 00:12

Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEP#DOOR that comes with capabilities to establish persistent access and harvest a wide […]

ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More Stories

May 1, 2026 // 00:11

The internet is noisy this week. We are seeing some wild new tactics, like people using fake cell towers to send scam texts, while some […]

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

May 1, 2026 // 00:11

In yet another software supply chain attack, threat actors have managed to compromise the popular Python package Lightning to push two malicious versions to conduct […]

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

Apr 30, 2026 // 11:42

Google has addressed a maximum severity security flaw in Gemini CLI — the “@google/gemini-cli” npm package and the “google-github-actions/run-gemini-cli” GitHub Actions workflow — that could […]

Official SAP npm packages compromised to steal credentials

Apr 30, 2026 // 01:56

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication tokens from developers’ […]

Popular WordPress redirect plugin hid dormant backdoor for years

Apr 30, 2026 // 01:16

The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago that allows injecting arbitrary code into users’ […]

SAP npm Packages Compromised by “Mini Shai-Hulud” Credential-Stealing Malware

Apr 29, 2026 // 19:32

Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido […]

cPanel, WHM emergency update fixes critical auth bypass bug

Apr 29, 2026 // 18:57

A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be exploited to obtain access to the […]

New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

Apr 29, 2026 // 18:03

Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the project by Anthropic’s Claude Opus large […]

Previous 1 … 320 321 322 323 324 … 388 Next