Railway Breach Puts Developer Secrets at Risk
Keys to the Cloud, Possibly in Stranger Hands Access keys to cloud services may have fallen into the wrong hands. The cause is a compromise of a platform where developers trusted their secrets to...
Tagged: Credential Theft
Langflow Flaw Exploited to Steal OpenAI and AWS Keys
Servers for developing AI applications have become vaults of valuable secrets, accessible through a single unprotected request. Attackers have begun exploiting the critical vulnerability CVE-2026-0768 in Langflow to extract OpenAI and AWS keys, administrator...
SynkLoader Uses Fake Windows Lock Screen to Steal Passwords via Teams
An ordinary-looking message from corporate IT support on Microsoft Teams can end in a stolen Windows password and full access to a company’s internal network. Researchers at Expel discovered a new malware family called...
StegoAd: 119 Malicious Edge Extensions Removed
Researchers have uncovered a network of malicious extensions inside the official Microsoft Edge store. These add-ons masqueraded as useful tools and operated for years alongside legitimate extensions. Disguised as ad blockers, weather widgets, video...
FortiBleed Turns Hacked FortiGate Firewalls Into Credential Collectors
FortiBleed began as mass password guessing. Then it grew into an attack chain, where hijacked firewalls gathered fresh credentials for the next breach. A new timeline shows that the published FortiGate password database was...
Living Off The Registry: Master AD CS Enumeration with the Native LOLBAS Toolkit
AD CS LOLBAS Toolkit Native Windows toolkit for AD CS enumeration and exploitation. Everything runs through built-in OS components (certreq.exe, certutil.exe, PowerShell AD module, .NET Framework) – no third-party tools needed(other than RSAT). Build...
The Zero-Click Ghost: How an Incomplete Patch Left Windows Open to Fancy Bear’s Credential Theft
An oversight within a security remediation has inadvertently carved a novel path for exploitation. While the developers successfully neutralized the remote code execution flaw weaponized by the APT28 collective, they left behind a secondary...
The Invisible Hijack: How AI-Powered “DeepLoad” Malware Vanishes into Your Lock Screen
A solitary click upon a purported “error rectification” within a browser may precipitate the absolute compromise of a computational architecture, and the nascent “DeepLoad” malware vividly illustrates the velocity of this subversion. Executing a...
The Torg Grabber Evolution: From Telegram Prototype to a Sophisticated Malware-as-a-Service Powerhouse
Within a specimen of malicious software, initially misidentified as the infamous Vidar infostealer, an entirely disparate narrative has been unearthed. Lurking beneath this misattribution was a nascent instrument for data exfiltration, subsequently christened the...
The Support Snare: How Cybercriminals are Hijacking LiveChat to Impersonate Amazon and PayPal
Phishing bombardments have long possessed the acumen to meticulously forge correspondence from colossal brands; however, contemporary digital marauders are increasingly eschewing orthodox counterfeit landing pages in favor of ushering their quarry into a chat...
The Search Engine Snare: How Storm-2561 Poisoned Google Results to Hijack VPN Credentials
The pursuit of a corporate VPN client across the digital expanse can culminate in the catastrophic exfiltration of credentials. The orchestration of a campaign by the cybercriminal syndicate designated Storm-2561 starkly illuminates the terrifying...
Vacuum of Power: The Rise of AuraStealer Amidst the 2026 Infostealer Dominance Struggle
Following the dismantling of the Lumma Stealer infrastructure in 2025, the landscape of data-stealing malicious software began to shift precipitously. Emerging and established instruments swiftly encroached upon the resulting vacuum, while a fierce struggle...
