Cyber Security News

📰

Security Boulevard LOW

12h

Hackers Spread Vidar and GhostSocks Malware Through Claude Code Leak

What happened Hackers are weaponizing the leaked Claude Code source to spread Vidar and GhostSocks malware through malicious repositories that impersonate the exposed codebase. The campaign followed A...

Read more →

📰

Bleeping Computer HIGH

12h

Hackers exploit React2Shell in automated credential theft campaign

Hackers are running a large-scale campaign to steal credentials in an automated way after exploiting React2Shell (CVE-2025-55182) in vulnerable Next.js apps. [...]

Read more →

📰

Security Affairs LOW

17h

Image or Malware? Read until the end and answer in comments :)

A malicious email delivered a .cmd malware that escalates privileges, bypasses antivirus, downloads payloads, sets persistence, and self-deletes. I received this email from a friend to make an analysi...

Read more →

📰

Security Affairs LOW

18h

Security Affairs newsletter Round 571 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffa...

Read more →

📰

The Hacker News HIGH

21h

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploit...

Read more →

📰

The Hacker News HIGH

21h

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 (CVSS scor...

Read more →

📰

Bleeping Computer LOW

1d

Axios npm hack used fake Teams error fix to hijack maintainer account

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social engineering campaign believed to have been conducte...

Read more →

📰

Security Affairs HIGH

1d

Qilin ransomware group claims the hack of German political party Die Linke

Qilin ransomware claims it stole data from Germany’s Die Linke and threatens to leak it; the party confirmed the incident, but not a breach. The Qilin ransomware group claims it stole data from Die ...

Read more →

📰

Security Affairs HIGH

1d

U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency...

Read more →

📰

Bleeping Computer LOW

1d

Device code phishing attacks surge 37x as new kits spread online

Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year. [...]

Read more →

📰

SecurityWeek LOW

1d

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack

Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information. The post European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack appeared...

Read more →

📰

Security Affairs LOW

1d

European Commission breach exposed data of 30 EU entities, CERT-EU says

CERT-EU says a European Commission cloud hack exposed data from 30 EU entities and links the breach to the TeamPCP group. CERT-EU attributed a European Commission cloud breach to the TeamPCP threat gr...

Read more →

Hackers Spread Vidar and GhostSocks Malware Through Claude Code Leak

Hackers exploit React2Shell in automated credential theft campaign

Image or Malware? Read until the end and answer in comments :)

Security Affairs newsletter Round 571 by Pierluigi Paganini – INTERNATIONAL EDITION

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

Axios npm hack used fake Teams error fix to hijack maintainer account

Qilin ransomware group claims the hack of German political party Die Linke

U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog

Device code phishing attacks surge 37x as new kits spread online

European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack

European Commission breach exposed data of 30 EU entities, CERT-EU says

Stay ahead of threats

Enquiry Received!