Browsing: credential theft

Essential Insights GHOST STADIUM is running a highly sophisticated phishing campaign with over 300 domains,…

Fast Facts Malicious npm packages like "aes-decode-runner-pro" and "postcss-minify-selector-parser" embed JavaScript droppers that deliver a…

Summary Points The rise in cyber incidents like phishing, ransomware, and credential theft underscores the…

Summary Points Attackers use IPv4-mapped IPv6 address obfuscation to bypass security controls, hiding malicious links…

Summary Points Attackers compromised over 400 AUR packages by modifying build scripts to install malware…

Fast Facts Legacy reputation scoring based on domain age is increasingly unreliable, allowing sophisticated attackers…

Summary Points Many top websites still lack X-Frame-Options or CSP frame-ancestors headers, leaving them vulnerable…

Essential Insights Attackers can exploit CVE-2026-42271 in LiteLLM LiteLLM to execute arbitrary commands via unauthenticated…

Top Highlights Threat actors exploit trusted collaboration tools like Microsoft Teams, impersonating internal or external…

Quick Takeaways Attackers can exploit prompt injection to trick AI coding tools like Claude Code…