Technology ❯ Cybersecurity

Data Exfiltration

Credential Theft Techniques Information Theft Credentials Theft Encryption Attack Vectors Remote Access Trojans Emails HPE Mailboxes Internal Phishing Sensitive Data Email Security Attacks Malware Tools Threat Intelligence Double Extortion Attack Methods Hacking System Information SMS Interception Natural Language Processing AI Security User Privacy Webhooks Browser Data Theft SSH Tunnels DNS Exfiltration Cloud Security WebRTC Command and Control User Data Protection Methods Incident Reports Prompt Injection Malware Techniques Tools and Techniques Detection Techniques Third-Party API Transmission

VOLTA-AUTODOXER: Windows Infostealer Uses LLMs to Rank Stolen Data and Then Self-Deletes

Talos says the tool automates victim triage, raising the risk that low-skill criminals can buy AI-ranked targets.

Microsoft Links 30+ Rotating Domains to MacSync Stealer by Tracking Behavior

DeepSeek Inside Hermes Used to Launch Autonomous Cyberattacks

MedusaHVNC Hijacks Real Browsers on Hidden Windows Desktops

Adobe Extension Flaw Let Websites Read WhatsApp Web Data

ClickLock Stealer Locks Mac Desktops and Forces Users to Reveal Passwords

Attackers Exploit SimpleHelp OIDC Flaw to Deploy TaskWeaver and Djinn Stealer

Mistic Backdoor Tied to KongTuke IAB Enables Stealthy In‑Memory Access

Supply-Chain Malware Tampered With Awesome Motive Plugin Scripts

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Mosyle Uncovers Two Undetected macOS Threats Targeting Developer and Cloud Credentials

Cisco Talos Attributes Taiwan Civil Society Attacks to 'LucidRook' Malware Cluster UAT-10362

Microsoft Links China-Linked Storm-1175 to Fast Zero-Day Exploits in Medusa Ransomware Campaigns

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

European Commission Confirms Cloud Data Breach at Europa.eu

Magento ‘PolyShell’ Exploited at Scale as New WebRTC Skimmer Bypasses Site Defenses