Category: Exploits
Akira Affiliate Rebooted a Victim Into Safe Mode to Kill EDR, Ransomware Still Failed
An Akira ransomware operator disabled endpoint defenses by forcing a compromised host into Safe Mode with Networking, but the encryption payload crashed…
US and South Korea Warn of Gunra Ransomware Hitting Government Networks
A joint advisory details how the Conti-derived Gunra ransomware group is exploiting Fortinet flaws and VPN weaknesses to breach critical infrastructure, now…
Head Mare Hackers Trojanize TrueConf Installers to Spread Backdoors
A hacktivist group is exploiting unpatched TrueConf video conferencing servers to plant web shells and swap legitimate client installers with backdoored versions,…
ClickFix Campaign Delivers macOS Crypto-Draining Stealer
A Go-based malware pushed through fake Terminal-command lures steals browser passwords and iCloud Keychain data while quietly siphoning cryptocurrency from active transactions.
Researchers Chain Three Samsung Bugs to Turn Bixby Into a Root Shell
A Pwn2Own-winning exploit chain used Samsung Members, Samsung Account, and Bixby's hidden Capsule system to achieve system-level compromise on Galaxy phones, earning…
Attackers Hide Post-Exploitation Toolkit Inside Oracle Database Itself
Huntress uncovered a rare technique in which hackers used a SQL injection flaw to compile and run a custom post-exploitation toolkit called…
N-able Patches Second Auth Bypass Flaw Under Active Attack on N-central Servers
N-able rushed out a hotfix after discovering that attackers were exploiting an incomplete patch for a prior authentication bypass, granting administrator access…
Coldcard Maker Destroys Vulnerable Inventory After $88M Bitcoin Theft
Coinkite has scrapped remaining stock of its Coldcard hardware wallets after attackers exploited a years-old firmware flaw to drain more than $88…
Adform Ad Script Hijacked to Swap Crypto Wallet Addresses on Copy
A supply-chain compromise of Adform's widely embedded tracking script let attackers silently replace Bitcoin, Ethereum, and TRON addresses copied by site visitors,…
Hijacked Hotel Wi-Fi Delivers CornFlake Spyware via Fake Browser Updates
Microsoft says a Storm-2945 campaign dubbed CaptiveCrunch is hijacking hotel Wi-Fi captive portals to push fake browser updates that install the CornFlake…
Adform Ad Script Hijacked to Swap Crypto Wallet Addresses on Copy
Attackers tampered with a JavaScript file served by ad-tech firm Adform, turning it into a browser-based tool that silently rewrote copied cryptocurrency…
Arch Linux Halts AUR Package Adoption After Malware Takeover Surge
Arch Linux has temporarily disabled Arch User Repository package adoption following a wave of malicious takeovers, with researchers linking the campaign to…