Recently, I had to extract embedded files from a set of OneNote files (extension .one). My onedump.py tool can extract individual…
1 min Open reportA critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's…
1 min Open reportMalicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the…
1 min Open reportCybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting…
1 min Open reportThe U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to…
1 min Open reportReddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering…
1 min Open reportVOLTA is a mature stealer implant with an optional AI-integration layer. After stealing credentials, sessions, and cryptocurrency…
1 min Open reportNamed “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login…
1 min Open reportA US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government…
1 min Open reportWireshark Release Candidate 5.0.0 was published: soon we can expect a new major version of Wireshark. Didier Stevens Senior…
1 min Open reportYARA-X's 1.22.1 is a bugfix version, it brings 2 bugfixes. Notice that there was also a release of YARA: 4.6.0, and that this…
1 min Open reportunitedrolls.com United Rolls United Rolls Inc. is a US mill roll manufacturer founded in 1898 in Canton, Ohio, producing…
1 min Open reportA malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to…
1 min Open reportThreat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed…
1 min Open reportAttack chain overviewAttack chain Host reconnaissance collection SSH authorization and tunnel identities Protocol Tunneling…
1 min Open reportCrowdStrike OverWatch identified a VAPOR PANDA campaign using ARTEX alongside the Chinese-developed DeepSeek large language model…
1 min Open reportIntro On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents. We believe these were authored by…
1 min Open reportFollowing reporting by The Wall Street Journal and the publication of research by Nightingale Collective, we want to clarify what…
1 min Open reportArtificial intelligence agents being tested by OpenAI launched a cyberattack against a popular software service two months before…
1 min Open reportJFrog Security Research is actively monitoring the recent GemStuffer incident, and using our extensive Catalog of RubyGems…
1 min Open report
