Technology ❯ Cybersecurity

Data Exfiltration

Credential Theft Techniques Credentials Theft System Information Malware SMS Interception Encryption Malware Techniques Natural Language Processing Command and Control

Supply-Chain Malware Tampered With Awesome Motive Plugin Scripts

Injected CDN JavaScript created hidden admin accounts, installing backdoor plugins that require server-side scans and full credential rotation.

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Mosyle Uncovers Two Undetected macOS Threats Targeting Developer and Cloud Credentials

Cisco Talos Attributes Taiwan Civil Society Attacks to 'LucidRook' Malware Cluster UAT-10362

Microsoft Links China-Linked Storm-1175 to Fast Zero-Day Exploits in Medusa Ransomware Campaigns

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

European Commission Confirms Cloud Data Breach at Europa.eu

Magento ‘PolyShell’ Exploited at Scale as New WebRTC Skimmer Bypasses Site Defenses

Researchers Show DNS Loophole Lets AWS Bedrock Code Interpreter Leak Data in Sandbox Mode

Microsoft Details ClickFix Wave That Uses Windows Terminal to Drop Lumma Stealer

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

Security Audits Expose Malicious and Data‑Harvesting Chrome Extensions Affecting Millions

Researchers Expose Gemini Calendar Data Leak via Malicious Invites as Google Rolls Out Mitigations

Microsoft Fixes 'Reprompt' Flaw That Enabled One-Click Data Theft From Copilot Personal

Researchers Detail 'Fantasy Hub,' Android RAT Sold as a Subscription on Telegram

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages