Tag: Cyber Security
Scammers are using fake Odyssey pirate downloads to spread malware that’s more dangerous than the Cyclops and Circe combined
Bitdefender says fake pirated downloads of The Odyssey, disguised as scene releases with .exe files carrying VLC icons, are spreading Lumma Stealer malware Stolen session cookies are the real danger, because they let an attacker resume an authenticated session without ever triggering a multi-factor prompt These builds seemingly ship without…
Read More
US healthcare software giant Unlimited Technology Systems admits hackers may have stolen sensitive data of 3.8 million people
Attackers stole extensive personal and medical data from 3.8 million individuals from Unlimited Technology Systems Breach source and methods remain unknown, with no group claiming responsibility Stolen data poses major fraud risks, prompting free identity monitoring from Kroll US healthcare organization Unlimited Technology Systems has revealed it suffered a cyberattack…
Read More
Shock horror — AI-generated security patches fall short of actually solving all the problems they were meant to fix
Researchers tested AI-generated patches on six CVEs with poor success rates Many fixes failed, altered behavior, or introduced new vulnerabilities Guidance improved outcomes, leading to FLAWED evaluation harness release When using Generative Artificial Intelligence (GenAI) to fix vulnerabilities, security professionals are most of the time just robbing Peter to pay…
Read More
Experts warn malicious AI skills are hitting more victims than ever — with one family amassing 1.7 million downloads
Attackers cloned AI skills, later adding malicious code to steal credentials Zenity Labs found millions of installs and dozens of dangerous skill variants Vercel and Microsoft removed malicious skills, but manual removal is still required AI skills, instructions that teach AI agents how to do certain tasks and thus extend…
Read More
New ChainDrop worm poisons over 1,300 npm packages, Keyv and Cacheable among those hit
Aikido researchers uncovers ChainDrop, a Shai‑Hulud variant infecting 1,300+ npm packages with an infostealer Attackers compromised GitHub accounts tied to popular libraries (Keyv, Cacheable, flat‑cache, file‑entry‑cache) and pushed tainted releases with 2B monthly downloads Malware exfiltrates developer/cloud credentials and secrets to a public GitHub repo; admins should treat affected systems…
Read More
Watch out — Microsoft login pages are being abused as hackers try and lure in unlucky victims, here’s what to look out for
Phishing campaign used fake Teams notifications to route victims to a genuine Microsoft sign-in page Rather than stealing passwords, attackers asked victims to approve permissions for an attacker-controlled app, gaining access to mail, files, Teams, SharePoint, OneDrive and calendars without defeating MFA Check Point says the technique has been commoditized…
Read More