A critical vulnerability has been unearthed within the esteemed workflow automation platform n8n, permitting the illicit seizure of vulnerable instances without the requisite credentials. By dispatching a meticulously crafted request, an adversary can extract...
DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi)....
JS Analyzer A powerful Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The goal is reduce noise as much as...
The hacking group known as ShinyHunters has claimed responsibility for breaching the infrastructure of Resecurity and exfiltrating internal data. Resecurity, however, maintains that the attackers gained access only to a deliberately constructed decoy—a segregated...
The hacking group known as Patchwork—also referred to as Dropping Elephant and Maha Grass—has once again come under scrutiny following a series of targeted attacks against Pakistan’s defense institutions. In its latest campaign, the...
A hacking group operating under the name DarkSpectre has, for seven years, systematically infected the computers of users running Chrome, Edge, and Firefox browsers. According to Koi Security, more than 8.8 million unique devices...
The hacking group known as Transparent Tribe has launched a new wave of cyber-espionage operations targeting government bodies, research institutions, and strategically important organizations in India. The attackers’ primary weapon is yet another variant...
A large-scale supply chain compromise known as Shai-Hulud has been linked to the recent theft of approximately USD 8.5 million in cryptocurrency from more than 2,500 Trust Wallet accounts. The company’s team has concluded...
An advertisement has surfaced on the BreachForums forum offering a large data archive for sale. According to the seller, operating under the alias “888,” the dataset is linked to Bitbucket repositories used in projects...
In the midst of the Christmas holidays, researchers at Greynoise detected a large-scale cyberattack targeting vulnerable Adobe ColdFusion servers. Within a short period, more than 2.5 million malicious requests were recorded, pointing to a...