Aggregator

The threat actors behind the ClearFake campaign are using fake reCAPTCHA or Cloudflare Turnstile verifications as lures to trick users into downloading malware such as Lumma Stealer and Vidar Stealer. ClearFake, first highlighted in July 2023, is the name given to a threat activity cluster that employs fake web browser update baits on compromised WordPress as a malware distribution vector. The

Власти ограничили доступ к X, YouTube и Instagram на фоне политического кризиса.

Cybercriminals have launched a new sophisticated attack campaign targeting travelers through fake booking websites. The campaign, discovered in early 2025, tricks users into installing LummaStealer malware through deceptive CAPTCHA verification processes, putting personal and financial information at risk. The attack begins when unsuspecting victims visit what appears to be a legitimate booking confirmation page. Before […]

The post Sophisticated Attack Via Booking Websites Installs LummaStealer Malware appeared first on Cyber Security News.

Gartner has claimed that AI agents will reduce the time it takes to exploit exposed accounts

Kali Linux 2025.1a 发布，新增 Hoaxshell 工具，全新主题和桌面更新，提升安全测试体验。

The Rules File Backdoor attack targets AI code editors like GitHub Copilot and Cursor, making them inject malicious code via a supply chain vulnerability. Pillar Security researchers uncovered a dangerous new supply chain attack vector called ‘Rules File Backdoor.’ Threat actors could use the technique to silently compromise AI-generated code by injecting malicious code. The attack […]

Нестандартный аргумент в переговорах Ox Thief начинает новую эру атак.

Identity-based attacks are on the rise. Attackers are targeting identities with compromised credentials, hijacked authentication methods, and misused privileges. While many threat detection solutions focus on cloud, endpoint, and network threats, they overlook the unique risks posed by SaaS identity ecosystems. This blind spot is wreaking havoc on heavily SaaS-reliant organizations big and small

获评企业数智化转型实践成果！360企业安全浏览器推动AI普惠

获评企业数智化转型实践成果！360企业安全浏览器推动AI普惠

Currently trending CVE - Hype Score: 3 - Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application behavior including data modification. This issue affects MongoDB Rust Driver 2.0 versions prior to 2.8.2

上号！开挖！

上号！开挖！

上号！开挖！

上号！开挖！

上号！开挖！

上号！开挖！