Aggregator

A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, GitHub Actions tampering, and SSH persistence. The activity has been attributed to the GitHub account "BufferZoneCorp," which has published a set of repositories that are associated with malicious Ruby gems and Go modules. As of

Supply Chain Attack / MalwareA new software supply chain attack campaign has been observed using s

Week 18 highlighted an active and evolving cyber threat landscape with widespread exploitation of critical vulnerabilities across enterprise systems, browsers, […]

The post Weekly Threat Landscape Digest – Week 18 appeared first on HawkEye.

Submit #804453 / VDB-360545

Submit #804450 / VDB-360544

Submit #804413 / VDB-360543

Submit #804408 / VDB-360542

Submit #804390 / VDB-360541

为促进网络与系统安全领域的学术交流，兹定于2026年5月23日（周六）在中国科学院计算技术研究所举办“CCF-INFORSEC网络空间安全前沿创新论坛”，欢迎大家报名参会！

Overview of Content Published in April Filed under: Announcement — Didier Stevens @ 9:28

Submit #804339 / VDB-360540

A newly identified Python-based malware known as DEEP#DOOR has surfaced as a serious threat to Windows users, combining a fully-featured backdoor with a powerful credential-stealing engine. What makes this threat especially concerning is how quietly it operates, embedding itself deep inside a compromised system while collecting sensitive data from multiple sources at once. The malware […]

The post Deep#Door Stealer Harvests Browser Passwords, Cloud Tokens, SSH Keys, and Wi-Fi Credentials appeared first on Cyber Security News.

Submit #804337 / VDB-360533

Anthropic launched Claude Security to counter faster AI-driven cyberattacks, as tools like Mythos enable near-instant exploitation by threat actors. Anthropic introduced Claude Security to help defenders keep up with a surge in AI-powered cyberattacks. As models like Mythos drastically reduce the time needed to exploit vulnerabilities, similar tools will likely spread among criminals and nation-state […]

Anthropic launches Claude Security to counter rapid AI-Powered exploits

The Fourth Amendment was written for a world of desks, drawers, and locked trunks. The modern invest

New StorybySwapneswar Sundar RaybySwapneswar Sundar Ray@swapneswarsundarrayBuilding AI-driven enter

Every organization that operates in a digital space needs to prioritize cybersecurity, but some

Специалисты обнаружили волну атак на государственные и авиационные компании.