Threat actors recently exfiltrated proprietary Meta product source code alongside the personal records of approximately 1,500 individuals. Specifically, the attackers gained unauthorized access to several corporate GitHub repositories. To execute the intrusion, the adversaries...
The Federal Bureau of Investigation has apprehended another individual allegedly affiliated with the notorious ShinyHunters cybercriminal syndicate. This arrest directly follows the severe infiltration of the FBIJobs.gov recruitment portal, a breach that exposed highly...
Malicious actors operating the GhostAction campaign successfully compromised two GitHub developer accounts. Within mere hours, they stealthily injected malicious scripts into a staggering minimum of 345 repositories. These insidious scripts systematically pilfered tokens and...
A catastrophic ransomware attack has severely crippled a significant portion of the Japanese cloud platform, IDCF Cloud, a critical infrastructure component upon which hundreds of corporate enterprises and government agencies rely. Currently, 495 organizations...
The FBI publicly extended an unprecedented invitation to the fugitive members of ShinyHunters. They urged the remaining operatives to voluntarily contact the Bureau following a crucial arrest in the Netherlands. Investigators identify the detained...
When an AI agent encountered difficulties attaching a screenshot to a private pull request, certain systems engineered an unexpected circumvention. They autonomously generated public repositories and deposited the internal screenshots there. Glow Security unearthed...
A terminated container is theoretically engineered to vanish entirely, alongside all its ephemeral data. However, within Cloudflare’s sprawling infrastructure, fragments of this sensitive information inexplicably survived the previous owner of the physical disk block....
Hackers claiming to have stolen the FBI’s personnel data may have reached people from one of the bureau’s most closely guarded divisions. Within the trove appeared staff of the Remote Operations Unit (ROU), the...
A critical vulnerability can easily outlive its official patch if system administrators fail to update their servers expeditiously. Precisely this perilous scenario is currently unfolding surrounding the widely deployed Roundcube Webmail platform. Malicious actors...
A solitary IP address, meticulously monitored by GreyNoise since early June, ultimately served as the primary entry point for a massive, multi-pronged cyberespionage campaign. This sophisticated operation simultaneously targeted diverse system classes, including WordPress...
A sophisticated cyberattack, which historically demanded an entire syndicate of skilled operators, now merely requires a handful of concise commands and a few hours of execution by autonomous AI tools. Gambit Security recently documented...
The Revolut data-leak saga has proven considerably wider than the initial account. A hacker under the pseudonym IAmNotAVillain claims that the attackers maintained access to the systems of several Italian law-enforcement divisions for about...
