Russian Police Disrupt VasyGrek Cybercrime Group And Seize Its Infrastructure
Russian authorities have disrupted the VasyGrek cybercrime group, while Kaspersky reports more than 100 attempted attacks across three countries in 2026.
LiteLLM Supply Chain Incident Prompts Security Review After Malicious Package Release
LiteLLM has disclosed a compromised package release involving credential theft capabilities, prompting users to remove affected versions and rotate exposed credentials.
Citizen Lab Reveals Spyware Campaign Using Online Advertising Infrastructure
Citizen Lab researchers uncover an alleged spyware campaign targeting Al Jazeera devices through online advertisements linked to advanced surveillance tools.
AOMEI Backupper Supply Chain Attack Used Short Update Tampering Windows
Security researchers reveal an AOMEI Backupper supply chain compromise where attackers altered update files briefly to deliver backdoors and remote access tools.
PEERSTITCH Malware Uses FortiOS Vulnerability For Covert Memory Based Attacks
Security researchers have identified PEERSTITCH malware exploiting a FortiOS vulnerability to create covert memory resident access and bypass security checks on tagged VPN sessions.
16 Firefox Extensions Discovered Stealing Crypto Wallet Credentials And Private Keys
Cybersecurity researchers identify 16 malicious Firefox extensions posing as crypto wallets to steal recovery phrases and private keys from users.
CERT UA Warns of LunexStealer Campaign Using Fake Cloudflare Verification Pages
CERT-UA has identified more than 100 compromised websites delivering LunexStealer through fake Cloudflare verification pages and ClickFix techniques, urging organisations to strengthen security controls.
Carbonato Malware Exploits Docker Hosts To Operate Hermes AI Agent Framework
Security researchers reveal Carbonato botnet attacks exposed Docker daemons to deploy Hermes AI Agent, enabling Telegram controlled operations and credential collection.
MemTensor Package Compromise Exposes Developers To Cross Platform Credential Stealer
Security researchers identify compromised MemTensor npm and PyPI packages delivering sckit malware designed to steal developer credentials and sensitive cloud data.
Meta Muse Mac App Flaw Could Expose AI Assistant Access Through Hidden Setting
Security researcher Patrick Wardle has demonstrated a Mac version Muse issue that could redirect AI assistant dictation and expose user granted access if a device is already compromised.
