16 Firefox Extensions Discovered Stealing Crypto Wallet Credentials And Private Keys
Cybersecurity researchers identify 16 malicious Firefox extensions posing as crypto wallets to steal recovery phrases and private keys from users.
CERT UA Warns of LunexStealer Campaign Using Fake Cloudflare Verification Pages
CERT-UA has identified more than 100 compromised websites delivering LunexStealer through fake Cloudflare verification pages and ClickFix techniques, urging organisations to strengthen security controls.
Carbonato Malware Exploits Docker Hosts To Operate Hermes AI Agent Framework
Security researchers reveal Carbonato botnet attacks exposed Docker daemons to deploy Hermes AI Agent, enabling Telegram controlled operations and credential collection.
MemTensor Package Compromise Exposes Developers To Cross Platform Credential Stealer
Security researchers identify compromised MemTensor npm and PyPI packages delivering sckit malware designed to steal developer credentials and sensitive cloud data.
Meta Muse Mac App Flaw Could Expose AI Assistant Access Through Hidden Setting
Security researcher Patrick Wardle has demonstrated a Mac version Muse issue that could redirect AI assistant dictation and expose user granted access if a device is already compromised.
Malicious npm Package Indexed Btree Uses Runtime Code To Hide Malware
Security researchers have uncovered a malicious npm package called indexed-btree that concealed malware inside runtime code, highlighting changing software supply chain attack methods.
ChainScript RAT Uses Polygon Smart Contracts For Flexible Command Infrastructure
Security researchers identify ChainScript RAT delivered through ClickFix lures, using Polygon smart contracts to rotate command and control infrastructure.
Anthropic Report Highlights AI Misuse Across Cyber Espionage And Surveillance Campaigns
Anthropic details how threat actors used Claude for cyber attacks, surveillance, influence campaigns, and autonomous operations while outlining actions taken to disrupt the activity.
Russian Cyber Espionage Group Uses Claude To Evade Malware Detection
Anthropic says it disrupted a Russian linked cyber espionage campaign that used Claude to automate malware rebuilding, phishing operations, and infrastructure management.
Node Js Runtime Abuse Linked To Malware Campaigns Targeting Multiple Sectors
Symantec reports that threat actors are abusing the trusted Node.js runtime to deploy malware in attacks targeting government agencies, technology firms, hotels, and financial organizations.
