After the inadvertent exposure of a 59.8 MB source map file in version 2.1.88 of the Anthropic AI npm package, security researcher Chaofan Shou discovered that 512,000 lines of unobfuscated TypeScript were now public. This leak included sensitive information such …
î „Ravie Lakshmananî ‚Apr 01, 2026Email Security / Artificial Intelligence The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new phishing campaign in which the cybersecurity agency itself was impersonated to distribute a remote administration tool known as …
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails Read More »
To create a unique version of the provided article that seamlessly integrates into a WordPress platform, the following rewritten content can be used: — In an exclusive interview with VentureBeat at RSAC 2026, Etay Maor, VP of Threat Intelligence at …
OpenClaw has 500,000 instances and no enterprise kill switch Read More »
î „Ravie Lakshmananî ‚Mar 30, 2026Threat Intelligence / Browser Security A recent cyberattack has been identified as utilizing the ClickFix strategy to distribute a newly discovered malware loader known as DeepLoad. According to ReliaQuest researchers Thassanai McCabe and Andrew Currie, the malware …
DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials Read More »
Citrix NetScaler Vulnerability Under Active Reconnaissance î „Ravie Lakshmananî ‚Mar 28, 2026Vulnerability / Network Security A critical security flaw affecting Citrix NetScaler ADC and NetScaler Gateway has been disclosed, with active reconnaissance activities reported by Defused Cyber and watchTowr. The vulnerability, known …
Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug Read More »
Recently, threat actors linked to Iran managed to gain unauthorized access to the personal email account of Kash Patel, the director of the U.S. Federal Bureau of Investigation (FBI). They proceeded to leak a collection of photos and documents from …
î „Ravie Lakshmananî ‚Mar 27, 2026Spyware / Mobile Security Apple has started sending Lock Screen notifications to iPhone and iPad users with older versions of iOS and iPadOS to warn them about web-based attacks and encourage them to update their devices. According …
Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits Read More »
A sophisticated and ongoing cyber espionage campaign linked to a Chinese threat actor has been discovered infiltrating telecom networks to spy on government systems. Attributed to the threat group known as Red Menshen, also identified as Earth Bluecrow, DecisiveArchitect, and …
China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks Read More »
î „Ravie Lakshmananî ‚Mar 25, 2026Cybercrime / Dark Web The alleged administrator of the LeakBase cybercrime forum has recently been apprehended by Russian law enforcement authorities, as reported by state media on Thursday. According to TASS and MVD Media, a news website …
LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace Read More »
In a scenario where an attacker embeds a hidden instruction in a forwarded email, an OpenClaw agent unknowingly complies with the instruction by forwarding credentials to an external endpoint. Despite the firewall logging HTTP 200 and EDR recording a normal …
OpenClaw can bypass your EDR, DLP and IAM without triggering a single alert Read More »
