Information Security

StopAndProtect Hacks 2,000 WordPress Sites to Spread Malware A compromised WordPress site is rarely just a website problem. If attackers can alter pages, inject scripts, or redirect visitors, your organization may become an unwilling part of a malware distribution network while customers continue to trust your domain. That risk is illustrated by a StopAndProtect campaign…

Read article

Microsoft Uncovers 30+ Domains Powering MacSync Stealer A credential-stealing campaign does not need a permanent command-and-control server to remain effective. It only needs enough infrastructure to stay ahead of blocking efforts. That is the concern behind Microsoft’s findings on MacSync Stealer, where more than 30 rotating domains were linked to infrastructure supporting the malware. As…

Read article

Microsoft Copilot Flaws Enable One-Click Data Theft A single click on a seemingly legitimate link can be enough to expose information you assumed was protected inside an AI assistant. That is the uncomfortable lesson from recently disclosed Microsoft Copilot flaws affecting Copilot Personal. According to reporting by The Hacker News, researchers demonstrated attack paths that…

Read article

AI Mind Viruses Spread Between Agents Through Prompt Files Introduction What happens when an AI agent reads a seemingly harmless prompt file, absorbs malicious instructions, and then passes those instructions to another agent? The security issue is no longer limited to one manipulated chatbot session. It can become a propagation problem across an AI-enabled workflow.…

Read article

16 Typosquatted RubyGems Steal Credentials and Crypto Wallets Introduction What happens when a developer makes a one-character mistake while installing a RubyGem? In a typosquatting attack, that small error can be enough to bring malicious code inside your development environment and expose credentials, cryptocurrency wallets, or other sensitive data. According to The Hacker News, 16…

Read article

SafePal Data Breach Exposes Nearly 40,000 Customers Introduction For a hardware wallet company, customer data can be almost as sensitive as the assets its products are designed to protect. SafePal is dealing with that reality after disclosing a security incident that reportedly exposed information belonging to nearly 40,000 customers. According to reporting by The Hacker…

Read article

CISA Warns of Actively Exploited Ray Browser RCE Flaw A browser vulnerability becomes a very different security problem once attackers begin exploiting it in the wild. At that point, the question for security teams is no longer whether a proof of concept might eventually become useful to adversaries. It is whether exposed systems in your…

Read article

Critical GitLab GraphQL Flaw Enables Public Project Deletion A public GitLab project is supposed to be public to read, clone, and collaborate on—not public to delete. Yet a critical GitLab GraphQL flaw shows how a weakness at the API authorization layer can turn ordinary external access into a serious availability and software supply-chain risk. According…

Read article

Snowflake GitHub Actions Flaw Enables Command Injection Introduction What if a routine pull request could turn your trusted CI/CD workflow into a path for arbitrary command execution? That is the risk highlighted by a recently reported Snowflake GitHub Actions flaw involving unsafe handling of attacker-controlled input. According to The Hacker News, researchers identified a command…

Read article

VMware Exploits Windows 0-Day and MCP Attacks Weekly Recap A single unpatched virtualization host can expose dozens of workloads. A Windows zero-day can turn an ordinary endpoint into an entry point for deeper compromise. And as organizations connect AI assistants to internal tools through Model Context Protocol (MCP), attackers are gaining another path to sensitive…

Read article