Pack2TheRoot: 12-Year-Old Linux PackageKit Flaw Enables Full Compromise

Security experts have found a high-severity flaw named Pack2TheRoot in PackageKit that allows hackers to gain full root access on multiple Linux distributions.

·

cybersecurity, Deutsche Telekom, Linux, Pack2TheRoot, PackageKit, Security, vulnerability

¶¶¶¶¶

Why Unofficial Download Sources Are Still a Security Risk in 2026

Security Risk in 2026: why unofficial download sources still put users at risk, and how to verify safe, official install paths before installing software.

·

cybersecurity, Downloads, Fraud, Malware, Phishing, Privacy, SCAM, Security, VPN

¶¶¶¶¶

82 Chrome Extensions Found Selling User Data, 6.5 Million Users Affected

LayerX research finds 82 Chrome extensions collecting and selling user data, affecting at least 6.5 million users through disclosed but concerning practices.

·

Browser, Chrome, cybersecurity, Data Security, Extensions, LayerX, Privacy, Security, Surveillance

¶¶¶¶¶

ShinyHunters Leaks Data of Udemy, Zara, 7-Eleven in Salesforce Linked Breach

ShinyHunters has leaked data linked to Udemy, Zara, and 7-Eleven, with claims of exposed Salesforce records and cloud-based systems.

·

7-Eleven, Anodot, Cyber Attack, Cyber Crime, cybersecurity, Data Breach, Data Breaches, Salesforce, ShinyHunters, Udemy, Zara

¶¶¶¶¶

UNC6692 Hackers Exploit Microsoft Teams to Deploy SNOW Malware

UNC6692 hackers exploit Microsoft Teams with fake IT alerts to deploy SNOW malware, steal credentials, and breach corporate networks in advanced attacks.

·

Cyber Attack, cybersecurity, Google, Malware, Mandiant, Microsoft, Security, Snow, UNC6692, Windoes

¶¶¶¶¶

Vidar Infostealer Spreads via Fake CAPTCHAs, Hides in JPEG and TXT Files

New version of Vidar infostealer spreads via fake CAPTCHAs, hides in JPEG and TXT files, uses fileless attacks and steals browser, crypto wallet data.

·

Captcha, Cyber Attack, cybersecurity, Infostealer, JPEG, Malware, Security, Vidar, Windows

¶¶¶¶¶

Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation

Microsoft Entra Agent ID flaw allowed privilege escalation and tenant takeover via Service Principal abuse, now fully patched by Microsoft.

·

Agentic AI, AI, Cyber Attack, cybersecurity, Identity theft, Microsoft, Microsoft Entra, Security, Silverfort, vulnerability

¶¶¶¶¶

Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts

Research from Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts.

·

Captcha, Cyber Attack, cybersecurity, Fraud, Privacy, SCAM, Scams and Fraud, Security, SMS

¶¶¶¶¶

New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows

·

Captcha, ClickFix, Cyber Attack, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security, Windows

¶¶¶¶¶

TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.

·

Bitwarden, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Developer, Malware, npm, Password manager, Security, TeamPCP

¶¶¶¶¶

1010.cx

1010.cx

Category: cybersecurity