Malicious Python packages target Telegram bot developers
Attackers published at least eight fake Pyrogram packages that included the original code along with a hidden backdoor.
Cybersecurity News - Page 8
Mustang Panda uses Zoho WorkDrive to hide cyber espionage attacks
The campaigns leveraged a new malware toolkit that includes SHARDLOADER, MINIRECON, and ZOHOMURK.
Hackers can hijack AI agents using hidden tool descriptions
New Microsoft’s research shows that AI agents can be tricked into sharing sensitive information without breaking any rules.
New BioShocking browser technique tricks AI tools into revealing user credentials
The attack affects AI browsers and assistants that can perform actions on a user's behalf, such as clicking links, filling out forms, and accessing signed-in accounts.
US offers $10M reward for information on Russia-linked hacker groups
UNC5792 is associated with the FSB Border Guards, while UNC4221 is believed to operate on behalf of the Russian military.
Hackers exploit SimpleHelp flaw to deploy new cross-platform malware
Attackers used the flaw to gain access to a SimpleHelp server before installing the TaskWeaver malware loader, and Djinn Stealer.
Gamaredon expands malware arsenal in ongoing campaign against Ukraine
Gamaredon's main goal remains stealing sensitive information that could support Russian interests in the war against Ukraine.
Cryptomining campaign targets Langflow AI framework via critical RCE flaw
The attackers have shifted to targeting exposed AI application endpoints as the initial access vector.
Hidden malware found in 119 Microsoft Edge extensions with millions of installs
The attackers hid malicious code inside image and font files, allowing it to avoid detection.
Japan's military suffers malware-infected USB security breach
The fake USB drives were reportedly handed to soldiers during earthquake relief efforts in March 2024.
Showing elements 71 - 80