Category: Imported News

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
144 Mastra npm Packages Compromised via Hijacked Contributor Account
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The Return of WhiteDate

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

No Coexistence Possible

100 Days of Adolf Hitler Appreciation
New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds
Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth