Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords

JFrog warns of malicious npm packages that mimic PostCSS tooling, drop a Windows RAT, and target Chrome-stored passwords through a staged infection setup route.

·

Chrome, Cyber Attack, cybersecurity, JFrog, Malware, npm, Password, PostCSS, RAT, SCAM, Security, Windows

¶¶¶¶¶

‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking

Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and expose tokens across major projects today.

·

CI/CD, Cordyceps, cybersecurity, GitHub, Novee, Security, Supply Chain, vulnerability

¶¶¶¶¶

New CryptoBandits Malware Uses USB Drives and Tor to Steal Crypto

Microsoft researchers warn of a new dual-action cryptocurrency clipper (CryptoBandits Malware) spreading through USB devices to alter wallet addresses and steal crypto assets.

·

Clipper, Crypto, cybersecurity, Malware, Microsoft, Security, Tor, USB

¶¶¶¶¶

The Evolution of iGaming Fraud: What Security Teams Should Expect in 2027

Learn how AI, deepfakes, synthetic identities and fraud-as-a-service may reshape iGaming risk, and what security teams can do to detect future threats in 2027.

·

Cyber Crime, cybersecurity, iGaming, Privacy, Scams and Fraud, Security

¶¶¶¶¶

2 Scattered Spider-Linked Hackers Plead Guilty Over £39M TfL Cyberattack

Two teenagers face sentencing after admitting to a massive Scattered Spider cyberattack that hit Transport for London (TfL) and US healthcare networks.

·

Cyber Attack, Cyber Crime, cybersecurity, Data Breach, Owen Flowers, Scattered Spider, Security, TFL, Thalha Jubair, Transport for London

¶¶¶¶¶

Beats Studio Buds Flaw Could Let Nearby Attackers Eavesdrop on Users

Apple has released a security update to patch a Beats Studio Buds flaw that let nearby hackers listen to conversations through the microphone.

·

Apple, Beats Studio Buds, cybersecurity, Privacy, Security, Spying, vulnerability

¶¶¶¶¶

Texas Parks and Wildlife Data Breach Affects Over 3M License Customers

Around 3 million Texas licence holders face a data breach after hackers targeted a third-party vendor, exposing driver’s licences and passport numbers.

·

Cyber Attack, cybersecurity, Data Breach, Data Breaches, Privacy, Security, Texas, vulnerability

¶¶¶¶¶

Threat Hunting Beyond Alerts: Finding the Activity Detection Misses

Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.

·

ANY.RUN, cybersecurity, Malware, Phishing, Sandbox, Security, Threat Analysis, Threat Detection, Threat Hunting, Threat Intelligence, Threat Mitigation

¶¶¶¶¶

Scammers Use Fake GitHub Stars, VirusTotal Reviews to Spread Crypto Clipper

A multi-platform malware campaign abuses fake trust signals to infect Windows and Mac users with a crypto clipper packed with 15,500 attacker wallets.

·

Check Point, Clipper, Crypto, Cyber Attack, cybersecurity, GitHub, Malware, SCAM, Security, VirusTotal

¶¶¶¶¶

Salesforce Disables Klue Integration After OAuth Token Theft Hits Customer Data

Icarus extortion group used a legacy Klue Battlecards credential to bypass security and steal bulk Salesforce records from affected companies.

·

Cyber Attack, cybersecurity, Data Breach, Data Breaches, Klue, Salesforce, Security, Supply Chain, vulnerability

¶¶¶¶¶

00110010.com

00110010.com

Category: Security