A solitary compromised file allowed cybercriminals to harvest credit card data across dozens of prominent Brazilian retailers. Specifically, the malicious actors embedded an invisible digital skimmer inside a routine analytics script. The infected script...
A Forgotten Backdoor on Millions of PCs An abandoned build of Popcorn Time kept a dangerous mechanism on millions of computers for years. Through it, anyone could quietly run code with top system privileges....
A Backdoor That Listens for One Voice Researchers have taught speech recognition systems to recognize a specific person by voice. At that moment, the system secretly changes the person’s words. In the most dangerous...
Merely launching Python after installing LiteLLM triggered immediate credential theft. On October 21, threat actors injected a malicious data stealer into version 1.107.0. The compromise affected all seven PyPI wheel releases and official Docker...
A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password. Unit 42 confirmed that...
Counterfeit AUR Helpers Run Code as Root Researchers found fake Arch Linux packages that pose as the popular tools yay and paru. During installation, they run malicious code with root privileges. The attackers kept...
Computer science researchers recently demonstrated a novel technique to conceal dormant functions within artificial neural networks. Even auditors with unrestricted access to model weights cannot trigger the hidden functionality through standard testing. Specifically, engineers...
XWorm has crossed a critical threshold where a conventional Remote Access Trojan (RAT) begins operating like a comprehensive pocket surveillance suite. Recently, Netskope Threat Labs identified four distinct variants of the malware circulating actively...
Threat actors have weaponized Google advertisements and Bing’s redirection architecture, forging an elaborate snare for macOS users seeking the Claude application. Analysts have unearthed a sophisticated paradigm wherein a promotional result for the query...
Malicious actors operating the GhostAction campaign successfully compromised two GitHub developer accounts. Within mere hours, they stealthily injected malicious scripts into a staggering minimum of 345 repositories. These insidious scripts systematically pilfered tokens and...
A Backdoor That Blends Into Calls and Video The ClingSTUN Linux backdoor has learned to hide its command activity where network defenses expect ordinary calls and video chats. The malware uses public STUN servers....
Malware Found in a Weather Services Network Malware has entered the operational technology (OT) network of Air Traffic and Navigation Services (ATNS), the South African operator. That network supports weather services for air traffic...
