PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks

07/04/2025 0 Comments 0 tags

A malicious campaign dubbed PoisonSeed is leveraging compromised credentials associated with customer relationship management (CRM) tools and bulk email providers to send spam messages containing cryptocurrency seed phrases in an

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

05/04/2025 0 Comments 0 tags

A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last month, painting a picture of a “conflicted”

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

05/04/2025 0 Comments 0 tags

The North Korean threat actors behind the ongoing Contagious Interview campaign are spreading their tentacles on the npm ecosystem by publishing more malicious packages that deliver the BeaverTail malware, as

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

05/04/2025 0 Comments 0 tags

Cybersecurity researchers have uncovered malicious libraries in the Python Package Index (PyPI) repository that are designed to steal sensitive information. Two of the packages, bitcoinlibdbfix and bitcoinlib-dev, masquerade as fixes

SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack

04/04/2025 0 Comments 0 tags

The cascading supply chain attack that initially targeted Coinbase before becoming more widespread to single out users of the “tj-actions/changed-files” GitHub Action has been traced further back to the theft

OPSEC Failure Exposes Coquettte’s Malware Campaigns on Bulletproof Hosting Servers

04/04/2025 0 Comments 0 tags

A novice cybercrime actor has been observed leveraging the services of a Russian bulletproof hosting (BPH) provider called Proton66 to facilitate their operations. The findings come from DomainTools, which detected

Have We Reached a Distroless Tipping Point?

04/04/2025 0 Comments 0 tags

There’s a virtuous cycle in technology that pushes the boundaries of what’s being built and how it’s being used. A new technology development emerges and captures the world’s attention. People

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

04/04/2025 0 Comments 0 tags

Ivanti has disclosed details of a now-patched critical security vulnerability impacting its Connect Secure that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2025-22457 (CVSS score:

Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code

04/04/2025 0 Comments 0 tags

A maximum severity security vulnerability has been disclosed in Apache Parquet’s Java Library that, if successfully exploited, could allow a remote attacker to execute arbitrary code on susceptible instances. Apache

CERT-UA Reports Cyberattacks Targeting Ukrainian State Systems with WRECKSTEEL Malware

04/04/2025 0 Comments 0 tags

The Computer Emergency Response Team of Ukraine (CERT-UA) has revealed that no less than three cyber attacks were recorded against state administration bodies and critical infrastructure facilities in the country