Hackers Can Exploit RabbitMQ OAuth Flaw to Access Every Message, Queue, and User

Security researchers have disclosed two access-control vulnerabilities in RabbitMQ, the open-source message broker used in an estimated 8% of all containers running today, that could allow attackers to seize full administrative control of a broker or s…

·

Cyber Attack, Cyber Security News

¶¶¶¶¶

Cybersecurity Negotiator Gets 70 Months for Helping BlackCat Extort Victims

Former ransomware negotiator Angelo Martino gets 70 months in prison for helping BlackCat extort US victims and misuse confidential client data in cyberattacks.

·

ALPHV, BlackCat, Cyber Attack, Cyber Crime, cybersecurity, Extortion, Fraud, Ransomware

¶¶¶¶¶

AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining

Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.

·

Amazon, Amazon Bedrock, Artificial Intelligence, Bedrock AI, Crypto, Cryptomining, Cyber Attack, cybersecurity, Darktrace, Malware, Security, SSH, vulnerability

¶¶¶¶¶

Armored Likho Hits Government, Energy Sectors With BusySnake Stealer

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.

·

AI, Armored Likho, Brazil, BusySnake Stealer, Cyber Attack, Cyber-Attacks, cybersecurity, Kazakhstan, Malware, Phishing, Russia, SCAM, Security

¶¶¶¶¶

UNK_MassTraction Exploits Roundcube Flaws Against US, Canadian Universities

China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers.

·

Canada, China, Cyber Attack, Cyber Crime, cybersecurity, Phishing Scam, Privacy, Roundcube, Security, University, UNK_MassTraction, USA, vulnerability

¶¶¶¶¶

FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member

Spanish police and the FBI arrested an alleged Cyber Army of Russia Reborn member as international efforts against pro Russia cyberattacks continue worldwide.

·

Cyber Army of Russia Reborn, Cyber Attack, Cyber Crime, cybersecurity, DDOS, FBI, ICS, Operation Red Circus, Operation Riptide, Russia, Z-Pentest

¶¶¶¶¶

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware.

·

ClickFix, Cloudflare, Cyber Attack, cybersecurity, Google, Malware, Scams and Fraud, Security

¶¶¶¶¶

Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat.

·

Agentic AI, AI Agent, Artificial Intelligence, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breach, JADEPUFFER, LLM, Malware, Ransomware, Security, Sysdig, vulnerability

¶¶¶¶¶

Fake “Google Notes” Browser Extension Caught Swapping Crypto Wallet Addresses

McAfee says a Google Notes browser extension is replacing copied crypto payment details, putting wallet transfers at risk for Chrome, Brave, and Microsoft Edge users.

·

Browser, Chromium, Crypto, Cyber Attack, cybersecurity, Extension, Fraud, Google Notes, Malware, mcafee, SCAM, Scams and Fraud, Security

¶¶¶¶¶

Fake Interpol Investigation Emails Push Ransomware at Small Businesses Globally

Fake Interpol investigation emails are targeting small businesses with Proton Drive links that deliver ransomware, encrypt files, and route victims to Tox chat.

·

Cyber Attack, Cyber Crime, cybersecurity, Fraud, Interpol, Malware, Ransomware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

1010.cx

1010.cx

Category: Cyber Attack