#using


WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Oct 1, 2026 // 17:40

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning […]

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

Sep 29, 2026 // 20:50

An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June […]

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

Sep 26, 2026 // 00:58

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through […]

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Sep 24, 2026 // 23:39

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to […]

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

Sep 21, 2026 // 11:42

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. “ChainScript has appeared under multiple build names, including […]

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Sep 7, 2026 // 11:18

Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. “The payloads are protected with javascript-obfuscator, […]

Attackers conceal phishing lures using invisible Unicode characters

Sep 7, 2026 // 01:00

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters. ASCII smuggling has been used […]

CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

Aug 14, 2026 // 14:13

Cybersecurity researchers have uncovered a large-scale, global recruitment-themed phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser (BitB) windows to steal Google and Facebook […]

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

Aug 5, 2026 // 23:57

OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, […]

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

Jul 10, 2026 // 17:25

Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege […]

1 2 3 Next