OpenAI Rotates macOS Certificates Following Axios Supply Chain Breach

OpenAI rotates macOS certificates after downloading a compromised Axios version, urging users to update apps before revoked certificates are blocked in May 2026.

·

Artificial Intelligence, Axios, ChatGPT, Cyber Attack, cybersecurity, macOS, Malware, North Korea, OpenAI, Security, Supply Chain Attack, UNC1069

¶¶¶¶¶

BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware

BITTER APT spreads ProSpy and ToSpy via Signal, Google, and Zoom lures, targeting journalists through LinkedIn and iMessage spearphishing.

·

Bitter, Cyber Attack, cybersecurity, Google, Malware, Middle East, ProSpy, Security, Signal, spyware, ToSpy, Zoom

¶¶¶¶¶

OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures

OpenSSF warns hackers impersonate Linux Foundation leaders on Slack, tricking developers into installing malware that can compromise entire systems.

·

Cyber Attack, cybersecurity, Google Workspace, Linux Foundation, Malware, OpenSSF, Phishing, Phishing Scam, SCAM, Scams and Fraud, Security, Slack

¶¶¶¶¶

Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand

Alleged German cybercrime figure behind Fluxstress and Neldowner arrested in Thailand after years running global DDoS-for-hire services across countries.

·

Bangkok, CaaS, Cyber Crime, cybersecurity, DDOS, Fluxstress, Germany, Malware, Noah Christopher, Ransomware, Security, Thailand

¶¶¶¶¶

Google Chrome Update Disrupts Infostealer Cookie Theft

Google adds Device Bound Session Credentials (DBSC) to Chrome 146, using hardware keys to block infostealer use of stolen session cookies on Windows.

·

Chrome, Cookie, cybersecurity, DBSC, Google, Infostealer, Malware, Security

¶¶¶¶¶

Android Banking Trojan Linked to Cambodia Scam Compounds Hits 21 Countries

Android banking trojan linked to Cambodia scam compounds uses forced labour to target users in 21 countries, bypassing security to steal funds.

·

Android, Banking, Cambodia, Chong Lua Dao, Cyber Crime, cybersecurity, Infoblox, K99 Triumph City, Malware, Security, TROJAN, trojon

¶¶¶¶¶

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware.

·

Blockchain, Cyber Attack, Cyber Crime, cybersecurity, Florida, GraphAlgo, Malware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

GitHub, GitLab Abused for Malware and Phishing Campaigns

Hackers are increasingly abusing trusted software development platforms GitHub and GitLab to host malware and credential phishing campaigns, making defensive detection significantly harder for enterprises. Because these Git-based platforms are deeply i…

·

cyber security, Cyber Security News, GitHub, GitLab, Malware, Phishing

¶¶¶¶¶

MuddyWater Uses Russian MaaS in New ChainShell Attack

MuddyWater is now weaponizing a Russian malware-as-a-service (MaaS) platform to run a new operation dubbed “ChainShell”, blending Iranian state targeting with commercially developed cybercrime tooling. The assessment is based on a misconfigured command…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

GlassWorm Trojan Hits VS Code, Cursor, Windsurf via OpenVSX Extension

A newly discovered supply chain attack is spreading the GlassWorm malware across multiple developer environments by abusing the OpenVSX extension marketplace. GlassWorm is not new. Researchers have tracked the campaign since March 2025, when attackers …

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

1010.cx

1010.cx

Category: Malware

OpenAI Rotates macOS Certificates Following Axios Supply Chain Breach

BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware

OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures

Alleged German DDoS-for-Hire Kingpin Behind Fluxstress Caught in Thailand

Android Banking Trojan Linked to Cambodia Scam Compounds Hits 21 Countries

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

GitHub, GitLab Abused for Malware and Phishing Campaigns

MuddyWater Uses Russian MaaS in New ChainShell Attack

GlassWorm Trojan Hits VS Code, Cursor, Windsurf via OpenVSX Extension