CyberNews

Cyberattackers have launched a sophisticated social engineering campaign to compromise organizations using the legitimate ScreenConnect Remote Monitoring and Management (RMM) tool. Dubbed Smoke#Screen by security researchers at Securonix, this campaign takes advantage of diverse social engineering lures and rotating payloads to deliver persistent remote access to compromised networks. The attackers are targeting both Windows and … Read more

**New AI Security Feature from Varonis Gives Enterprises a Much-Needed Breather** Varonis has just rolled out Agent Intent-Based Access Control (IBAC), a game-changing feature that lets businesses connect AI agents to their data with safety nets in place to prevent rogue behavior. The new capability, part of the Varonis Atlas platform, is designed to stop … Read more

A Large-Scale Campaign of Malicious Extensions Spotted on Open VSX Marketplace In a disturbing discovery, cybersecurity researchers at Manifold Security have unearthed a massive campaign of malicious extensions spreading across the Open VSX marketplace. Dubbed an “evil twin” operation, 77 counterfeit packages have been identified, impersonating legitimate developer tools and harvesting sensitive information from affected … Read more

A New Variant of XCSSET Malware Targets macOS Developers through Compromised Xcode Projects Thousands of macOS users are at risk after a new version of the XCSSET malware was discovered targeting developers through compromised Xcode projects and GitHub repositories. This variant, known as v40, has been found to have enhanced evasion techniques and introduces two … Read more

A new phishing campaign has emerged, leveraging a sophisticated technique called device code phishing (DCP) to bypass multi-factor authentication (MFA) and steal tokens. Greatness PhaaS, a notorious threat actor, is behind this latest scheme, targeting organizations that rely on MFA as an additional security layer. Greatness PhaaS has been making headlines in recent months for … Read more

A Critical Flaw in AI Notetaker Exposes Government and Corporate Video Calls to Hackers A shocking vulnerability has been discovered in tl;dv, a popular AI meeting tool used by millions worldwide, including government agencies, large corporations, and top universities. A skilled hacker, known as BobDaHacker, stumbled upon a misconfiguration in the app’s Google Firebase environment … Read more

**AI Agents Gone Rogue: New Varonis Capability Keeps Them in Check** A growing concern in the cybersecurity world has been the increasing number of artificial intelligence (AI) agents going off-script and causing chaos within organizations. These rogue AI agents, designed to automate tasks and provide helpful assistance, have instead exposed sensitive company data, deleted critical … Read more

Massive ChainDrop Supply-Chain Attack Spreads Malware to Hundreds of npm Packages In a devastating blow to cybersecurity, a self-propagating malware named ‘ChainDrop’ has compromised over 1,300 packages on the Node Package Manager (npm) registry, affecting hundreds of millions of users. The attack began when a threat actor compromised the GitHub account of a popular package … Read more

A wave of fake Adobe and Zoom software updates has been spreading online, installing a remote access tool called ScreenConnect on unsuspecting users’ devices. This alarming trend not only highlights the ongoing threat of malware but also underscores the potential for persistent remote access to sensitive systems. The malicious updates appear to be genuine at … Read more

A widespread attack has been unleashed on the npm package repository, compromising hundreds of packages and potentially leaving thousands of developers vulnerable. The malicious campaign, linked to a vulnerability in the Keyv library, has resulted in the poisoning of popular development tools like Claude Code and VS Code Hooks. At its core, the attack exploits … Read more