Author: Team-CWD
A series of attacks on npm libraries including axios was the work of North Korean actors, AWS has said. The…
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier,…
Anthropic has found evidence that three of its Claude AI models broke free of a sandbox environment to hack third-party…
For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers…
A cryptomining operation has been observed abandoning root access on compromised Linux servers in favor of impersonating low-privileged users, a…
Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws…
The UK’s leading cybersecurity agency has urged device manufacturers to help incident response teams by making it easier for them…
The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates the ability to…
A recent hacking campaign impersonated notifications from Microsoft Teams and abused Microsoft’s legitimate authentication infrastructure to compromise corporate Outlook, SharePoint…
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found…