Malicious JetBrains plugins and Chrome extensions target AI API keys and chatbot data
Cybersecurity researchers have identified a coordinated malware campaign on the JetBrains Marketplace, where at least 15 malicious plugins have been ...
Tag: malicious
Police increase alert for malicious activity during NBA Finals Knicks game
The NBA Finals return to New York on Monday, with heightened security concerns outlined by the New York Police Department. ...
Underminr CDN vulnerability conceals malicious traffic within trusted domains
Threat actors are reportedly exploiting a significant vulnerability in shared content delivery network (CDN) infrastructure, which allows them to obscure ...
Malicious Docker Images and VS Code Extensions Target Checkmarx Supply Chain
Cybersecurity researchers have alerted users about malicious images found in the official "checkmarx/kics" Docker Hub repository. According to the software ...
Russian CTRL Toolkit Uses Malicious LNK Files to Hijack RDP via FRP Tunnels
Cybersecurity researchers have identified a Russian-origin remote access toolkit, named CTRL, which is distributed through malicious Windows shortcut (LNK) files ...
Chrome extension becomes malicious after ownership transfer, enabling code injection and data theft
Two Google Chrome extensions have been compromised following an apparent ownership transfer, enabling attackers to distribute malware, execute arbitrary code, ...
ClawJacked vulnerability allows malicious sites to hijack OpenClaw AI agents via WebSocket
OpenClaw has addressed a critical security vulnerability that could have enabled a malicious website to gain control over a locally ...
Malicious VS Code Extension Discovered with Ransomware Features
Cybersecurity researchers have identified a malicious Visual Studio Code (VS Code) extension named "susvsex," which exhibits basic ransomware capabilities and ...
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
A new set of four malicious packages has been identified in the npm package registry, designed to steal cryptocurrency wallet ...
Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets
Cybersecurity researchers have identified a malicious npm package named nodejs-smtp, which mimics the legitimate library nodemailer, to stealthily inject harmful ...
News Summarized. Time Saved. Bite-sized news briefs for busy people. No fluff, just facts.