Technology ❯ Cybersecurity

Data Exfiltration

Credential Theft Techniques SMS Interception System Information Natural Language Processing Encryption Malware Cloud Security User Privacy Internal Phishing

Mosyle Uncovers Two Undetected macOS Threats Targeting Developer and Cloud Credentials

The findings underscore a shift to stealthy credential theft that outpaces signature-based antivirus.

Cisco Talos Attributes Taiwan Civil Society Attacks to 'LucidRook' Malware Cluster UAT-10362

Microsoft Links China-Linked Storm-1175 to Fast Zero-Day Exploits in Medusa Ransomware Campaigns

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

European Commission Confirms Cloud Data Breach at Europa.eu

Magento ‘PolyShell’ Exploited at Scale as New WebRTC Skimmer Bypasses Site Defenses

Researchers Show DNS Loophole Lets AWS Bedrock Code Interpreter Leak Data in Sandbox Mode

Microsoft Details ClickFix Wave That Uses Windows Terminal to Drop Lumma Stealer

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

Security Audits Expose Malicious and Data‑Harvesting Chrome Extensions Affecting Millions

Researchers Expose Gemini Calendar Data Leak via Malicious Invites as Google Rolls Out Mitigations

Microsoft Fixes 'Reprompt' Flaw That Enabled One-Click Data Theft From Copilot Personal

Researchers Detail 'Fantasy Hub,' Android RAT Sold as a Subscription on Telegram

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

China-Linked Actor Turns Velociraptor Into Ransomware Beachhead, Cisco Talos Warns

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

Google and Mandiant Expose BRICKSTORM Espionage With Yearlong Persistence in U.S. Firms

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

LevelBlue Publishes IOCs on Fileless AsyncRAT Attack Exploiting ScreenConnect

Shamos Mac Infostealer Spreads Through ClickFix Lures, CrowdStrike Warns