-
Threat actors have successfully exploited a design flaw in GitHub’s fork architecture to distribute malware disguised as the legitimate GitHub Desktop installer. The attack chain begins with a deceptively simple but effective technique. Attackers…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
US prosecutors have charged 31 more suspects in a nationwide ATM jackpotting scam, bringing the total number of defendants to 87 across multiple states.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Poland blocked a Russian wiper malware attack on power and heating plants, officials say, avoiding outages during winter and prompting tighter cyber rules.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Another day, another fake CAPTCHA scam, but this one abuses Microsoft’s signed tools.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A dangerous new malware toolkit is being sold on Russian cybercrime forums that can redirect victims to fake websites while keeping the real domain name visible in their browser’s address bar. The toolkit, called Stanley, costs between $2,000 and…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A dangerous new iteration of the “Contagious Interview” campaign that weaponizes Microsoft Visual Studio Code task files to distribute sophisticated malware targeting software developers. This campaign, which began over 100 days ago, has in…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Say hello to Stanley, a new malicious toolkit that guarantees bypassing Google’s Chrome Web Store review process.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A sophisticated, multi-stage espionage campaign targeting Indian residents through phishing emails impersonating the Income Tax Department. The attack chain, tracked as the “SyncFuture Espionage Campaign,” weaponizes legitimate enterprise s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A new phishing campaign abusing the Vercel hosting platform has been active since at least November 2025 and is becoming increasingly sophisticated. The core trick is “inherited trust.” Attackers send short phishing emails with financial or business th…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Another day, another trove of login credentials in plain text found online.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
