GrayCharlie’s WordPress malware campaign hijacks sites via supply chain attack
GrayCharlie, which has been active since mid-2023, injects malicious scripts into compromised WordPress sites.
Cybersecurity News - Page 12
Notepad++ releases security update after targeted supply chain attack
the latest release introduces a “double lock” design intended to make the update process "robust and effectively unexploitable."
AI as a C2 Proxy technique turns AI assistants into C&C relays
The method was tested against platforms including Microsoft Copilot and Grok.
China-linked UNC6201 deploys Grimbolt backdoor via Dell RecoverPoint zero-day
Versions of RecoverPoint for Virtual Machines prior to 6.0.3.1 HF1 contain hardcoded credentials that could allow hackers gain root access.
Polish authorities arrest suspected Phobos ransomware affiliate
US authorities have linked the group to attacks on more than 1,000 public and private organizations worldwide.
New study finds password recovery issues in major cloud-based password managers
The issues span a wide spectrum, from targeted vault integrity violations to the potential compromise of all vaults within an organization.
Dutch man arrested after downloading confidential police files and demanding compensation
The man allegedly downloaded the files and refused to delete the documents after police told him to do so.
Malicious Chrome extensions hijack 500,000 VKontakte accounts
The extensions were capable of automatically subscribing victims to attacker-controlled groups, resetting personal settings, and exploiting weaknesses in VK’s security protections.
Infostealer malware targets OpenClaw AI agent files in first documented attack
Researchers detected a live infection in which an infostealer successfully exfiltrated a victim’s OpenClaw configuration environment.
Threat actors leverage DNS queries in ClickFix malware delivery technique
Microsoft has observed a novel variation that replaces traditional HTTP-based payload delivery with DNS lookups.
Showing elements 111 - 120