Noodlophile Stealer Hides Behind Bogus Copyright Complaints Summary Noodlophile is a sophisticated infostealer campaign that now uses bogus copyright‑complaint emails aimed at corporate social media pages to deliver malicious payloads.…
Workday Breach Likely Linked to ShinyHunters Salesforce Attacks Summary Workday says a socially engineered campaign against its third-party CRM allowed attackers to access “commonly available” business contact information (names, emails,…
PipeMagic Backdoor Resurfaces as Part of Play Ransomware Attack Chain Summary Microsoft Threat Intelligence and researchers at Kaspersky and BI.ZONE report that the PipeMagic modular backdoor has reappeared in attacks…
10 Major GitHub Risk Vectors Hidden in Plain Sight Summary GitHub is now more than version control — it’s woven into every stage of modern software delivery. Researchers at OX…
‘DripDropper’ Hackers Patch Their Own Exploit Key Points • Attackers exploited CVE-2023-46604, a high-severity remote code execution bug in Apache ActiveMQ, to gain initial access to Linux servers. • The…
Millions Allegedly Affected in Allianz Insurance Breach Summary Have I Been Pwned reports about 1.1 million Allianz Life customers had personal data exposed after a 16 July compromise of a…
Ransomware gang masking PipeMagic backdoor as ChatGPT desktop app: Microsoft Summary Microsoft has published a detailed analysis of PipeMagic, a modular backdoor used by a threat actor it calls Storm-2460.…
Casino gaming company Bragg says hackers accessed ‘internal computer environment’ Summary Bragg Gaming Group said it discovered a cyber incident on Saturday morning in which attackers accessed its internal computer…
North Korea-linked hackers target embassies in Seoul in new espionage campaign Summary A months-long espionage campaign, active since March and still ongoing, targeted at least 19 embassies and foreign ministries…
Drug development company Inotiv reports ransomware attack to SEC Summary An Indiana-based contract research organisation, Inotiv, disclosed to the SEC that it discovered a ransomware incident on 8 August that…
