Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from...
have
Australian Enterprises At Risk as Anthropic Finds Hackers In Claude Code
69% of Australian organizations are now running autonomous AI agents in live production environments. Only 22% have anything resembling a...
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to...
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Ravie LakshmananJul 14, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ...
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to bypass Secure...
Two arrested over credit card phishing – as the Netherlands is named Europe’s worst for payment fraud
Two young men have been arrested in the Netherlands on suspicion of running a phishing operation that harvested the credit...
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Ravie LakshmananJul 13, 2026Endpoint Security / Cybercrime Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable...
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after...
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement organizations undertaken by suspected China-...
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
Ravie LakshmananJul 10, 2026AI Security / Vulnerability Details have emerged about three now-patched security flaws in the OpenClaw personal artificial...
Google’s $3 ChromeOS Flex USB Kit: What to Know Before Installing
Old laptops are getting one more shot at relevance, though US buyers may have already missed the latest window. Google...
Summer of Clearinghouses
Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and...
GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses
Ravie LakshmananJul 09, 2026Malware / Endpoint Security Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the...
Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious...
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will...
