Cybercrime

Malicious pgserve, automagik developer tools found in npm registry

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ‘a complete organizational takeover’.

NFC tap-to-pay gets tapped by hackers

Attackers are abusing a modified Android NFC app to steal payment card data and PINs for contactless fraud and ATM cash-outs.

Top techniques attackers use to infiltrate your systems today

Popular tool abuse, ClickFix, and identity-based attacks are among the most prevalent techniques bad actors are deploying these days to break into enterprise networks.

The thin gray line: Handala, CyberAv3ngers and Iran’s proxy ops

Iran is playing a game of "cyber hide-and-seek" by using radical personas to mask state-level attacks, allowing them to hit US infrastructure without starting an official war.

Mallory Launches AI-Native Threat Intelligence Platform, Turning Global Threat Data Into Prioritized Action

Attackers abuse Microsoft Teams to impersonate the IT helpdesk in a new enterprise intrusion playbook

Microsoft details a cross-tenant social engineering technique that tricks employees into granting remote access and enables stealthy data exfiltration.

Hackers exploit Vercel’s trust in AI integration

Compromised Context.ai integration let attackers inherit Vercel employee access and reach internal systems, exposing a limited set of customer credentials.