A critical security vulnerability has been discovered in a popular Node Package Manager (npm) package, allowing hackers to steal cryptocurrency wallet private keys and mnemonic seed phrases. The Injective SDK project’s GitHub repository was compromised, leading to the publication of a malicious package on npm that has already been downloaded over 50,000 times. The affected … Read more
Cloud Bucket Hijacking, Windows LPE Chain, and Global Fraud Bust Exposed in Recent Threat Landscape Updates A series of alarming security threats has been exposed in recent days, with hackers targeting cloud storage buckets, exploiting a previously unknown vulnerability in Windows systems, and engaging in large-scale global fraud. In this article, we’ll take a closer … Read more
A major update to the popular package manager npm has just been rolled out, with significant implications for developers and users of open-source software. As of July 9th, npm version 12 will no longer execute install scripts by default, a change aimed at reducing the risk of supply chain attacks. This move comes in response … Read more
A New Windows Backdoor Emerges, Wiping Data and Spying on Users In a worrying development, researchers have uncovered a sophisticated backdoor malware targeting Windows systems, capable of wiping entire disks, spreading fake ransomware, and installing spyware. The new threat, discovered by experts at cybersecurity firm ESET, has been dubbed “GigaWiper.” If you use a Windows … Read more
A worrying trend is unfolding on GitHub, where attackers are using dormant accounts to blend in and map corporate organizations’ internal structures. Researchers have uncovered evidence of malicious activity involving these seemingly inactive profiles, which raises significant concerns about the potential for insider threats or compromised credentials. The issue highlights the importance of monitoring even … Read more
Microsoft has announced plans to retire the lightweight version of its Outlook Web App email client, known as OWA Light, from Exchange Server. The decision marks a significant shift in Microsoft’s focus towards modernizing its web-based email experience, and it will likely have far-reaching implications for organizations that still rely on outdated systems. For those … Read more
Microsoft is ramping up its efforts to bolster Windows security through artificial intelligence (AI) as the company relies increasingly on AI-powered tools to uncover vulnerabilities in its codebase. As a result, users can expect to see more frequent and extensive security updates in the coming months. The acceleration of vulnerability discovery thanks to advances in … Read more
A new threat group called Helix has emerged, using sophisticated tactics to steal sensitive data from SharePoint environments. The group’s modus operandi involves voice phishing, device code phishing, and multi-factor authentication abuse to gain access to victim accounts. Once inside, Helix operators quickly register a new authenticator app for persistence, browse and enumerate SharePoint, and … Read more
A New Era of Cyber Threats Emerges with Cloud Bucket Hijacking and AI-Powered Vulnerability Discovery The latest threat landscape is proving more complex than ever, with a surge in sophisticated attacks targeting cloud storage buckets and exploiting software vulnerabilities discovered by artificial intelligence models. In this new era of cyber threats, even the most seemingly … Read more
A major blow has been dealt to the world of software development, with npm – one of the largest package managers for JavaScript – taking a crucial step towards mitigating the risk of supply chain attacks. As of its latest release, npm 12 disables install scripts by default, a move that is expected to have … Read more