Threats tagged 'infosecnews'

MostereRAT Targets Windows, Uses AnyDesk and TightVNC for Full Access Source: https://hackread.com/mostererat-windows-anydesk-tightvnc-access/

News#infosecnews#redditGermany+6

Lazarus Group Deploys Malware With ClickFix Scam in Fake Job Interviews Source: https://hackread.com/lazarus-group-malware-clickfix-scam-fake-job-interview/

Malware#infosecnews#redditGermany+7

Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens Source: https://hackread.com/salesloft-drift-breach-github-compromise-oauth-tokens/

Breach#infosecnews#redditGermany+5

Czech cyber agency warns against Chinese tech in critical infrastructure Source: https://www.bleepingcomputer.com/news/security/czech-cyber-agency-warns-against-chinese-tech-in-critical-infrastructure/

News#infosecnews#redditCzechia+9

iCloud Calendar abused to send phishing emails from Apple’s servers Source: https://www.bleepingcomputer.com/news/security/icloud-calendar-abused-to-send-phishing-emails-from-apples-servers/

Phishing#infosecnews#redditGermany+9

Qantas cuts executive bonuses by 15% after a July data breach Source: https://securityaffairs.com/181954/data-breach/qantas-cuts-executive-bonuses-by-15-after-a-july-data-breach.html

Breach#infosecnews#redditGermany+5

Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign Source: https://thehackernews.com/2025/09/noisy-bear-targets-kazakhstan-energy.html

Phishing#infosecnews#redditGermany+6

GhostAction Attack Steals 3,325 Secrets from GitHub Projects Source: https://hackread.com/ghostaction-attack-steals-github-projects-secrets/

Campaign#infosecnews#redditGermany+6

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys Source: https://thehackernews.com/2025/09/malicious-npm-packages-impersonate.html

News#infosecnews#redditGermany+5

MeetC2 - A serverless C2 framework that leverages Google Calendar APIs as a communication channel Source: https://securityaffairs.com/181940/security/meetc2-a-serverless-c2-framework-that-leverages-google-calendar-apis-as-a-communication-channel.html

Botnet#infosecnews#redditGermany+6

TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations Source: https://thehackernews.com/2025/09/tag-150-develops-castlerat-in-python.html

Malware#infosecnews#redditGermany+6

Max severity Argo CD API flaw leaks repository credentials Source: https://www.bleepingcomputer.com/news/security/max-severity-argo-cd-api-flaw-leaks-repository-credentials/

News#infosecnews#redditGermany+7

Financial services firm Wealthsimple discloses data breach Source: https://www.bleepingcomputer.com/news/security/financial-services-firm-wealthsimple-discloses-data-breach/

Breach#infosecnews#redditGermany+6

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation Source: https://thehackernews.com/2025/09/cisa-orders-immediate-patch-of-critical.html

VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages Source: https://thehackernews.com/2025/09/virustotal-finds-44-undetected-svg.html

Phishing#infosecnews#redditGermany+7

SVG files used in hidden malware campaign impersonating Colombian authorities Source: https://securityaffairs.com/181917/malware/svg-files-used-in-hidden-malware-campaign-impersonating-colombian-authorities.html

Malware#infosecnews#redditSpain+6

U.S. CISA adds Sitecore, Android, and Linux flaws to its Known Exploited Vulnerabilities catalog Source: https://securityaffairs.com/181924/breaking-news/u-s-cisa-adds-sitecore-android-and-linux-flaws-to-its-known-exploited-vulnerabilities-catalog.html

News#infosecnews#redditGermany+9

Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X Source: https://hackread.com/scammers-exploit-grok-ai-video-ad-scam-x-malware/

Chess.com discloses recent data breach via file transfer app Source: https://www.bleepingcomputer.com/news/security/chesscom-discloses-recent-data-breach-via-file-transfer-app/

Breach#infosecnews#redditGermany+7

France’s CNIL fined Google $379M and Shein $175M for breaching cookie rules Source: https://securityaffairs.com/181911/laws-and-regulations/frances-cnil-fined-google-379m-and-shein-175m-for-breaching-cookie-rules.html

News#infosecnews#redditFrance+7