Information Security News Blog

macOS Claude malvertising attack redirect chain 0

macOS Claude Malvertising Attack Uses Bing Redirects

Threat actors have weaponized Google advertisements and Bing’s redirection architecture, forging an elaborate snare for macOS users seeking the Claude application. Analysts have unearthed a sophisticated paradigm wherein a promotional result for the query...

GhostAction attack compromised developer accounts GitHub supply chain 0

GhostAction Hack Compromises GitHub Developer Accounts

Malicious actors operating the GhostAction campaign successfully compromised two GitHub developer accounts. Within mere hours, they stealthily injected malicious scripts into a staggering minimum of 345 repositories. These insidious scripts systematically pilfered tokens and...

AhsayCBS backup server hack XMRig crypto miner 0

AhsayCBS Backup Servers Hacked for Stealthy Monero Mining

Malicious actors have systematically commenced exploiting twin vulnerabilities within AhsayCBS backup servers. Following successful infiltration, these assailants deploy insidious web shells alongside the XMRig cryptocurrency miner. Huntress cybersecurity analysts have definitively observed these targeted...

Windows Cloud Files Driver CVE-2026-80093 vulnerability cldflt.sys 0

The Hidden Dangers of Windows Cloud Files

A cloud file within Windows masquerades beautifully as a conventional document residing on your local disk. However, beneath this seamless transparency, complex code operates with formidable kernel privileges. Recently, Cisco Talos meticulously detailed a...

Atlassian vulnerability CVE-2026-21589 Jira Confluence Bitbucket security 0

Rapid Exploitation of Critical Atlassian Flaw

Hackers launched attacks against Atlassian servers utilizing the critical CVE-2026-21589 vulnerability a mere two hours after experts published a technical breakdown and proof-of-concept code. This egregious flaw afflicts eight prominent enterprise products, including Jira,...

Zhang Yu 0

US Places Massive Bounty on Elusive Hacker

US bounty Chinese hacker Zhang Yu Hafnium campaign Microsoft Exchange The United States government stands ready to pay up to 10 million dollars for critical information leading to the apprehension of Chinese hacker Zhang...