Armored Likho Hits Government, Energy Sectors With BusySnake Stealer

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.

·

AI, Armored Likho, Brazil, BusySnake Stealer, Cyber Attack, Cyber-Attacks, cybersecurity, Kazakhstan, Malware, Phishing, Russia, SCAM, Security

¶¶¶¶¶

UNK_MassTraction Exploits Roundcube Flaws Against US, Canadian Universities

China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers.

·

Canada, China, Cyber Attack, Cyber Crime, cybersecurity, Phishing Scam, Privacy, Roundcube, Security, University, UNK_MassTraction, USA, vulnerability

¶¶¶¶¶

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

Noma Labs details GitLost, a prompt injection flaw that made GitHub’s AI agent expose private repo data through a crafted public issue and guardrail failures.

·

Agentic AI, cybersecurity, GitHub, GitHub Actions, GitLost, Privacy, Repository, Security, vulnerability

¶¶¶¶¶

4 Best Email Security Solutions to Keep Employee Inboxes Safe

Compare leading and best email security solutions with AI threat detection, phishing defense, malware blocking, and DLP features for teams.

·

AI, Business, cybersecurity, Email Security, emails, Privacy, Security

¶¶¶¶¶

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware.

·

ClickFix, Cloudflare, Cyber Attack, cybersecurity, Google, Malware, Scams and Fraud, Security

¶¶¶¶¶

New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App

The newly spotted PamStealer is spreading through a fake Maccy clipboard app and steal Mac passwords, browser data and clipboard content.

·

Apple, Clipboard, Infostealer, Maccy, macOS, Malware, PamStealer, Security

¶¶¶¶¶

FortiBleed Credential Theft Connected to INC and Lynx Ransomware

FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerability also under investigation.

·

Cyber Crime, cybersecurity, FortiBleed, FortiGate, Fortinet, INC, INC Ransomware, Lynx, Security, SOCRadar

¶¶¶¶¶

Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat.

·

Agentic AI, AI Agent, Artificial Intelligence, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breach, JADEPUFFER, LLM, Malware, Ransomware, Security, Sysdig, vulnerability

¶¶¶¶¶

Ransomware-Proof Backup: 7 Strategies for Enterprise IT Teams

Ransomware-proof backup planning helps IT teams protect clean data copies, isolate storage, test recovery, and keep operations running after cyber attacks fast.

·

Backup, Business, cybersecurity, Malware, Ransomware, Security, Technology

¶¶¶¶¶

Fake “Google Notes” Browser Extension Caught Swapping Crypto Wallet Addresses

McAfee says a Google Notes browser extension is replacing copied crypto payment details, putting wallet transfers at risk for Chrome, Brave, and Microsoft Edge users.

·

Browser, Chromium, Crypto, Cyber Attack, cybersecurity, Extension, Fraud, Google Notes, Malware, mcafee, SCAM, Scams and Fraud, Security

¶¶¶¶¶

1010.cx

1010.cx

Category: Security