Technology ❯ Cybersecurity ❯ Data Exfiltration

Credential Theft

One-Time Passwords Cloud Security User Data Collection Public Repositories Cloud Credentials Living-off-the-Land Binaries Environment Variables GitHub Actions

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

The finding shows cross-device syncing can leak login codes through the PC, prompting a shift to hardware security keys.

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Mosyle Uncovers Two Undetected macOS Threats Targeting Developer and Cloud Credentials

Microsoft Links China-Linked Storm-1175 to Fast Zero-Day Exploits in Medusa Ransomware Campaigns

LevelBlue Publishes IOCs on Fileless AsyncRAT Attack Exploiting ScreenConnect