On Monday, July 13th, a new wave of malicious activity was spotted targeting organizations worldwide, leveraging a previously unknown vulnerability in an open-source web application framework. The ISC Stormcast, a daily podcast and newsletter from SANS Institute, broke the news, warning that the exploitation is already underway. The vulnerable software, called “Appletalk”, is used by … Read more
OpenAI Temporarily Lifts Usage Limits on Powerful GPT-5.6 Sol Model, Giving Users a Breathing Room In a move that has provided much-needed relief to developers and professionals who rely heavily on its flagship language model, OpenAI has announced that it is temporarily lifting the usage limits on its powerful GPT-5.6 Sol model. The change comes … Read more
**Free Access to Claude Fable 5 Extended for Paid Users** In a move that will come as welcome news to many users, Anthropic has just announced an extension of free access to its powerful language model, Claude Fable 5. Initially set to expire on July 7, the promotion has now been extended until July 19, … Read more
A last-minute reprieve for paid subscribers to Claude Fable 5, as Anthropic extends access to the powerful model until July 19. This marks the third extension in recent weeks, giving users a brief window of opportunity to continue using Fable 5 without additional costs. The promotion applies to all paid plans, including Pro, Max, Team, … Read more
A New Variant of RedHook Malware Exploits Wireless ADB to Gain Shell Access on Android Devices Researchers at Group-IB have uncovered a novel way that the RedHook Android malware is gaining shell-level privileges on mobile devices. The latest version of this malicious software takes advantage of the Android Wireless Debugging (Wireless ADB) mechanism, allowing it … Read more
A New Twist on Android Malware: RedHook Exploits Wireless ADB for Shell Access Researchers at Group-IB have uncovered a fresh version of the RedHook Android malware that leverages the Android Wireless Debugging (Wireless ADB) mechanism to gain shell-level privileges without requiring a computer connection. This development marks a significant escalation in the capabilities of this … Read more
Threat actors have been using a clever tactic to systematically gather sensitive information about organizations and their users through the GitHub API, according to a recent report from Datadog. This reconnaissance campaign has been ongoing for several months, with multiple overlapping campaigns leveraging “ghost accounts” – dormant user accounts that were registered years ago but … Read more
A new wave of sophisticated cyber attacks has been uncovered, targeting government agencies and organizations worldwide through a surprising vector: the Balochistan Police Portal in Pakistan. In what is being described as a multi-group espionage campaign, hackers have exploited vulnerabilities in this online platform to gain access to sensitive information, compromise systems, and launch further … Read more
A new and concerning threat has emerged on the npm package registry, one of the largest repositories of open-source code used in software development worldwide. A compromised version of Jscrambler’s 8.14.0 library was released, secretly installing a Rust-based infostealer malware during installation. The affected package, labeled as “jscrambler”, appears to be a legitimate library designed … Read more
Threat actors have been systematically scanning and mapping GitHub organizations, repositories, and user accounts using a network of dormant “ghost” accounts. The abuse of GitHub’s API has been ongoing for several months, with multiple overlapping campaigns using leaked credentials and automated scanners to gather information. The activity, discovered by cybersecurity firm Datadog, involves exploiting publicly … Read more