-
pretalx XSS flaw lets attackers hijack conference organizer accounts, steal sessions, auto-accept talks, and demote admins. Patched in v2026.1.0.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are using fake purchase order emails and process hollowing to deploy fileless PureLogs malware to steal Windows users’ browser, crypto, and Discord data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A malicious Codex UI npm package with 27,000 weekly downloads was caught exfiltrating OpenAI refresh tokens, exposing developers to account takeover risks.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Fake Anthropic websites are being used to target Claude Code users with a fileless infostealer campaign that steals browser credentials and evades detection.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Email still reaches more people than any other digital channel. Getting it to actually land in the inbox…
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Iran’s Nimbus Manticore hackers used trojanized Zoom installers to deploy malware against US firms during a wider IRGC linked cyber campaign.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybercriminals are using SEO poisoning and fake Gemini and Claude installer sites to infect developers with fileless malware and steal data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic says its Claude Mythos AI identified more than 10,000 software vulnerabilities in one month, including critical flaws in open-source code.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers compromised FBI Chief Kash Patel’s clothing store in a ClickFix attack that tricked macOS users into installing infostealer malware.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
