Cybersecurity News
-
npm Software Supply Chain Attack Spreads via CI and AI Coding Tools
Security researchers at Socket‘s Threat Research have uncovered a new supply-chain attack that blends typosquatting, credential theft, and emerging attacks on AI-assisted developer tooling. The campaign, tracked as SANDWORM_MODE, is being described…
-
Social Ads Used to Promote Fake Windows 11 Updates That Deliver Malware
Hackers are abusing Facebook’s advertising platform to distribute fake Windows 11 download pages that deliver credential-stealing malware instead of legitimate updates. In a Malwarebytes security report, campaigns were found using paid Facebook…
-
Active Exploitation Observed in Critical BeyondTrust Vulnerability
Security research published by Palo Alto Networks’ Unit 42 has found active exploitation of a newly disclosed critical vulnerability affecting BeyondTrust’s Remote Support, a software used for privileged access and remote administration.…
-
PayPal Reports Extended Customer Data Exposure
According to customer notifications reviewed by BleepingComputer, PayPal disclosed a data exposure incident that led to the prolonged exposure of sensitive customer information for several months. The software misconfiguration affected the working…
-
New Android Malware Uses Gemini AI to Stay Active and Enable Remote Control
Security researchers at ESET have identified a new Android malware family that uses Google Gemini as part of its execution flow. ESET describes it as the first known Android threat to abuse…
-
Dell Issues Critical Security Update After Active Exploitation of RecoverPoint Vulnerability
Dell has released an urgent security update for RecoverPoint for Virtual Machines after confirming active exploitation of a critical vulnerability that could allow attackers to gain root-level access to affected systems. The…
-
Vulnerabilities Found in Popular Software Development Extensions
Security researchers have identified multiple vulnerabilities in widely used integrated development environment (IDE) extensions, add on tools used in software development editors such as Visual Studio Code, exposing an attack surface in…
-
Study Finds Security Design Flaws in Cloud Password Managers
Academic researchers have disclosed a series of security weaknesses in several widely used cloud-based password managers that could allow attackers to view, alter, or fully compromise stored credentials, even in environments advertised…
-
Research Shows Infostealers Expanding to AI Agent Environments
A recent cybersecurity investigation by Hudson Rock, a firm specializing in cybercrime intelligence and infostealer threat monitoring, has uncovered a real-world infostealer infection that successfully exfiltrated configuration files from an OpenClaw AI…