Cloud sharing has revolutionized office life, making it easier than ever to collaborate with coworkers, clients, and business partners. However, this convenience comes at a cost: many organizations are struggling to keep track of who has access to their sensitive data. In fact, 61% of security leads report that shared files often remain active longer … Read more
A Sophisticated Malware Campaign Exploits GitHub Repositories to Bypass Security Measures and Steal Sensitive Data A complex and highly organized malware campaign has been uncovered, utilizing fake GitHub repositories to impersonate well-known software firms and push a previously unknown information stealer called Rapuncel. This campaign not only steals sensitive data from infected devices but also … Read more
A massive data breach has hit Gyazo, a popular cloud-based screenshot and screen-recording tool used by 23 million users worldwide. Hackers exploited a server vulnerability to steal approximately 23.6 million user records, leaving many wondering what happened, who is affected, and how it will impact their online security. The incident occurred on September 11, 2026, … Read more
A notorious hacking group, known as Transparent Tribe, has unleashed a new backdoor malware written in Rust programming language. The malicious code, dubbed “RustBackdoor,” is being deployed using private GitHub repositories for command and control (C2) purposes, allowing attackers to maintain stealthy access to compromised systems. Transparent Tribe, a cybercrime collective with a history of … Read more
A critical vulnerability in WordPress, one of the most widely used content management systems (CMS) on the internet, has been discovered. The bug, known as Click2Shell, allows attackers to trick users into installing malicious themes and plugins, ultimately paving the way for code execution. This flaw affects over 60% of WordPress installations, putting millions of … Read more
A Devastating Data Breach Hits Gyazo, Exposing 23.6 Million User Records Gyazo, a popular cloud-based screenshot and screen-recording tool used by millions of gamers worldwide, has fallen victim to a massive data breach. Hackers exploited a server vulnerability on September 11, 2026, stealing an astonishing 23.62 million user records from the platform’s database. The incident … Read more
Cybersecurity researchers have uncovered a sophisticated exploit technique that allows repository owners to swap code across multiple AI-powered coding agents, highlighting the ongoing cat-and-mouse game between hackers and defenders in the world of software development. Plugin4Shell is the name given to this new attack vector, which relies on manipulating the behavior of four widely-used AI … Read more
A Critical Security Risk Remains Lurking in Plain Sight – Thousands of Websites Still Linked to Abandoned CDN Domain A significant cybersecurity vulnerability has been discovered, with thousands of websites still using an abandoned Content Delivery Network (CDN) domain that was re-registered after being left dormant for years. This issue exposes a critical security risk, … Read more
A Critical Azure AI Flaw Exposes Organizations to Catastrophic Privilege Escalation Attacks Microsoft has issued an emergency patch for a critical vulnerability in its Azure AI Foundry, a cloud-based artificial intelligence platform used by thousands of organizations worldwide. The flaw, rated CVSS 10.0 – the highest severity rating possible – enables attackers to escalate privileges … Read more
A New Rust Backdoor Emerges, Leveraging Private GitHub Repositories for Command and Control In a concerning development, the Transparent Tribe threat group has unveiled a new backdoor crafted using the Rust programming language. Dubbed “Rust-Backdoor,” this malware variant is notable for its reliance on private GitHub repositories to facilitate command and control (C2) communications. The … Read more