FulcrumSec claims Manchester Airports hack, theft of 86 GB of data

Manchester Airports Group Hit by Massive Data Breach, Exposing Sensitive Customer Info A devastating data breach has struck Manchester Airports Group (MAG), compromising sensitive customer information and exposing over 86 gigabytes of data to potential misuse. The attack is claimed by extortion group FulcrumSec, which has a history of targeting organizations with significant financial resources. … Read more

Chrome Web Store extensions caught stealing crypto, browser data

A sophisticated malware campaign has been uncovered in the Google Chrome Web Store and Microsoft Edge add-ons marketplace, where malicious extensions have been stealing cryptocurrency, sensitive browser data, and even injecting fake browser updates. The operation, which may have started as early as 2024, involved at least 16 extensions that provided distinct functionalities, including draining … Read more

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

A widespread cyber threat has emerged, targeting users of the popular AI platform Claude. Infostealer malware, which typically infects computers through downloads or malicious apps, is hijacking active Claude sessions to drain usage limits and consume account resources. The affected accounts are being signed out, payment methods removed, and unauthorized charges refunded by the company. … Read more

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

A sophisticated cyber attack campaign, dubbed TerminalFix, has been unfolding in the shadows of the dark web, using a particularly insidious tactic to compromise unsuspecting websites. The attackers have managed to successfully deploy a reverse-tunnel backdoor on over 1,000 websites by disguising themselves as Cloudflare’s CAPTCHA service. This cunning ruse allows them to bypass traditional … Read more

YARA-X 1.20.0 Release, (Sun, Aug 30th)

The latest update to YARA-X, a powerful tool for hunting and analyzing malware, has brought significant improvements and bug fixes to the table. Released on August 30th, version 1.20.0 boasts 14 new features and a whopping 13 bug fixes, making it an essential update for anyone using this crucial cybersecurity resource. YARA-X is a command-line … Read more

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

A highly sophisticated cyber threat has been uncovered, targeting organizations across various industries with a cunning tactic that leverages fake Cloudflare CAPTCHAs to deploy a reverse-tunnel backdoor. Dubbed “TerminalFix,” this malware campaign has left security experts scratching their heads as they struggle to understand the extent of its reach. At its core, TerminalFix exploits vulnerabilities … Read more

YARA-X 1.20.0 Release, (Sun, Aug 30th)

A New Era for Threat Detection: YARA-X and YARA Updates Bring Significant Improvements The latest release of YARA-X, a powerful threat detection tool, has arrived with a slew of improvements and bug fixes. The new version, 1.20.0, brings 14 enhancements to the existing functionality, along with 13 critical bug fixes that address issues affecting users. … Read more

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

A Critical WordPress Vulnerability Affects Thousands of Sites, Leaving Them Open to Takeover or Remote Code Execution In a shocking revelation, it’s been discovered that five critical vulnerabilities in popular WordPress plugins and themes have left thousands of websites vulnerable to takeover or remote code execution. These flaws, which affect some of the most widely … Read more