Information Security

Risk Management Data Protection Threat Intelligence Data Breaches Threat Detection Threat Analysis Cyber Threats Data Management Phishing Attacks Password Management

3 ARTICLES

last wk.

UpdraftPlus Breach Lets Stolen Dashboard Keys Backdoor WordPress Sites

Attackers used valid UpdraftCentral connection keys to push malicious plugins which forced urgent patches and key revocations across hundreds of thousands of sites.

3 ARTICLES

last mo.

HAProxy Compromised by Embedded 'Ted' Backdoor Used to Spy on South Korean Firms

4 ARTICLES

2mo ago

LiteLLM Supply‑Chain Breach May Have Exposed Thousands After 40‑Minute Malicious PyPI Window

3 ARTICLES

2mo ago

DeadLock Ransomware Uses Session and Polygon Smart Contracts to Harden Extortion Infrastructure

5 ARTICLES

3mo ago

Google Removes ADK Workflows After Researchers Show Gemini Agent‑to‑Agent Privilege Escalation

4 ARTICLES

3mo ago

Phishing Campaign Impersonates LastPass and Bitwarden to Steal Master Passwords

3 ARTICLES

3mo ago

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

4 ARTICLES

3mo ago

RedWing Malware Is Sold as a Telegram Rental Service

4 ARTICLES

4mo ago

SLA Vendor Cloud Held Personal Data of About 70,000 People

4 ARTICLES

4mo ago

Massive Password-Spray Flood Targets Azure CLI, Compromises Dozens

3 ARTICLES

4mo ago

China-Linked Hackers Deploy New TinyRCT Backdoor Against Southeast Asian Energy and Government Networks

4 ARTICLES

4mo ago

Malware Campaign Uses Compromised WhatsApp Accounts to Deliver Remote‑Control Tools

3 ARTICLES

5mo ago

Kaspersky Finds About 17% of Public Wi‑Fi at Mexico World Cup Sites Insecure

3 ARTICLES

5mo ago

Spanish Courts Shift Liability to Banks in Phishing Cases

3 ARTICLES

5mo ago

Turla Rebuilds Kazuar Into Modular P2P Botnet for Stealthy Long-Term Access

3 ARTICLES

5mo ago

Counterfeit Claude Code Installer Targets Developers With Browser Credential Theft

5 ARTICLES

6mo ago

Checkmarx Confirms LAPSUS$ Posted Data Stolen From Its GitHub After Supply-Chain Breach

Information Security

UpdraftPlus Breach Lets Stolen Dashboard Keys Backdoor WordPress Sites

HAProxy Compromised by Embedded 'Ted' Backdoor Used to Spy on South Korean Firms

TerminalFix Uses Fake Cloudflare CAPTCHA to Install WebSocket Reverse Tunnel

ToxicPanda 2.0 Hijacks Android Features to Take Over Phones and Banking Apps

Pirated Copies of The Odyssey Deliver Lumma Stealer to Windows PCs

LiteLLM Supply‑Chain Breach May Have Exposed Thousands After 40‑Minute Malicious PyPI Window

DeadLock Ransomware Uses Session and Polygon Smart Contracts to Harden Extortion Infrastructure

Google Removes ADK Workflows After Researchers Show Gemini Agent‑to‑Agent Privilege Escalation

Phishing Campaign Impersonates LastPass and Bitwarden to Steal Master Passwords

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

Never miss stories about

Information Security

RedWing Malware Is Sold as a Telegram Rental Service

SLA Vendor Cloud Held Personal Data of About 70,000 People

Massive Password-Spray Flood Targets Azure CLI, Compromises Dozens

China-Linked Hackers Deploy New TinyRCT Backdoor Against Southeast Asian Energy and Government Networks

Malware Campaign Uses Compromised WhatsApp Accounts to Deliver Remote‑Control Tools

Kaspersky Finds About 17% of Public Wi‑Fi at Mexico World Cup Sites Insecure

Spanish Courts Shift Liability to Banks in Phishing Cases

Turla Rebuilds Kazuar Into Modular P2P Botnet for Stealthy Long-Term Access

Counterfeit Claude Code Installer Targets Developers With Browser Credential Theft

Checkmarx Confirms LAPSUS$ Posted Data Stolen From Its GitHub After Supply-Chain Breach

Never miss stories about

Information Security