Technology ❯ Cybersecurity

Data Exfiltration

Techniques Credential Theft HPE Mailboxes Sensitive Data Email Security Attacks Malware Internal Phishing Tools Emails

Researchers Show DNS Loophole Lets AWS Bedrock Code Interpreter Leak Data in Sandbox Mode

AWS characterizes the DNS behavior as intended functionality, directing customers to VPC isolation.

Microsoft Details ClickFix Wave That Uses Windows Terminal to Drop Lumma Stealer

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

Researchers Expose Gemini Calendar Data Leak via Malicious Invites as Google Rolls Out Mitigations

Microsoft Fixes 'Reprompt' Flaw That Enabled One-Click Data Theft From Copilot Personal

Researchers Detail 'Fantasy Hub,' Android RAT Sold as a Subscription on Telegram

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

China-Linked Actor Turns Velociraptor Into Ransomware Beachhead, Cisco Talos Warns

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

Google and Mandiant Expose BRICKSTORM Espionage With Yearlong Persistence in U.S. Firms

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

LevelBlue Publishes IOCs on Fileless AsyncRAT Attack Exploiting ScreenConnect

Shamos Mac Infostealer Spreads Through ClickFix Lures, CrowdStrike Warns

Massive Malvertising Campaign Hits Nearly 1 Million Windows Devices