Hackers Actively Exploit ‘Nginx Rift’ Vulnerability Affecting NGINX, F5 Products

Hackers are actively exploiting the Nginx Rift vulnerability affecting NGINX and F5 products, exposing servers to denial-of-service attacks.

·

Cyber Attack, cybersecurity, F5, NGINX, Security, VulnCheck, vulnerability

¶¶¶¶¶

New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords

The newly discovered Reaper malware bypasses Apple’s macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor.

·

AMOS, Apple, Atomic Stealer, Cyber Attack, cybersecurity, macOS, Malware, Reaper, Security

¶¶¶¶¶

Government Backed Hackers Abuse Cloudflare in Malaysian Espionage Campaign

Government Backed Hackers abused Cloudflare storage services in a Malaysian espionage campaign involving hidden C2 systems and data exfiltration.

·

Cloudflare, Cyber Attack, Cyber Espionage, Cyber-Attacks, cybersecurity, Malaysia, Malware, Oasis Security, Phishing, Privacy, Security, Spying

¶¶¶¶¶

Scammers Send Physical Phishing Letters to Steal Ledger Wallet Seed Phrases

Scammers are mailing fake Ledger phishing letters to users in Italy with QR codes that trick crypto wallet users into revealing seed phrases.

·

Crypto, Cyber Attack, cybersecurity, France, Fraud, Italy, Ledger, Phishing, Phishing Scam, Privacy, QR, QR Code, SCAM, Scams and Fraud, Security

¶¶¶¶¶

Grafana Says It Rejected Ransom Demand After Source Code Theft

Grafana says hackers stole its source code after accessing a GitHub token, but no customer data or systems were affected.

·

Cyber Attack, Cyber Crime, cybersecurity, Data Breaches, GitHub, Grafana, Ransom, Source Code, vulnerability

¶¶¶¶¶

Hackers Use PyInstaller and AMSI Patching to Deliver XWorm RAT v7.4

Hackers are hiding XWorm malware in PyInstaller files to bypass Windows security, steal data and remotely control devices through ads.

·

AMSI, Cyber Attack, cybersecurity, Malware, Point Wild, PyInstaller, RAT, Scams and Fraud, Security, XWorm, XWorm 7.4

¶¶¶¶¶

CalPhishing Scam Uses EvilTokens Kit, Outlook Invites to Steal M365 Sessions

Hackers are exploiting Outlook calendar invites and device code phishing to steal M365 session tokens, bypass MFA and breach enterprise accounts.

·

CalPhishing, Cyber Attack, Cyber Crime, cybersecurity, EvilTokens, Fortra, M365, Outlook, Outlook Invite, Phishing, Phishing Scam, Scams and Fraud, Security

¶¶¶¶¶

Popular node-ipc npm Library Hit by Supply Chain Attack, Impacting 822K Weekly Downloads

A widely used npm package with more than 822,000 weekly downloads has once again become the center of a serious supply chain attack, raising fresh concerns across the JavaScript ecosystem. Security researchers at Socket have uncovered multiple maliciou…

·

Cyber Attack, cyber security, Cyber Security News, vulnerability

¶¶¶¶¶

Fake Job Interview Apps Drop JobStealer Malware on Windows and macOS

Hackers are using Fake interview apps to spread JobStealer malware on macOS and Windows to steal crypto wallets, browser data, and passwords.

·

Cyber Attack, cybersecurity, Fraud, Interview, JobStealer, macOS, Malware, SCAM, Scams and Fraud, Security, Telegram, Windows

¶¶¶¶¶

FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit

Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,…

·

Azerbaijan, China, Cyber Attack, Cyber-Attacks, cybersecurity, FamousSparrow, Malware, Microsoft, MS Exchange, Oil and Gas, Security

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: Cyber Attack