Cyber News

Leveraging Coding Agents – A New Slopsquatting Attack Disrupts Malware Delivery Workflows

The rapid integration of AI-driven coding agents, such as Claude Code CLI, OpenAI Codex CLI, and Cursor AI, has revolutionized…

10 months ago

Critical mcp-remote Vulnerability Enables Remote Code Execution in LLM Clients

A critical security vulnerability in mcp-remote, a widely-used proxy tool that enables Large Language Model applications to connect with remote…

10 months ago

McDonald’s AI Hiring Bot Exposed Millions of Job Applicants’ Data With Weak ‘123456’ Password

A massive data breach affecting McDonald's AI-powered hiring system, revealing that millions of job applicants' personal information was accessible through…

10 months ago

GitPhish – A Tool for Automated GitHub Device Code Exploitation

A sophisticated open-source tool designed to automate GitHub Device Code Phishing attacks, addressing critical operational challenges that have previously limited…

10 months ago

BladedFeline Exploits Whisper and PrimeCache to Breach IIS & Microsoft Exchange Servers

In a significant discovery, security experts at ESET have unveiled the activities of BladedFeline, an advanced persistent threat (APT) group…

10 months ago

Malicious Word Document Delivers Spyware to Batavia Employees – A Stealthy Malware Attack

A sophisticated cyberattack campaign, first detected in July 2024 and continuing into 2025, has put Russian industrial enterprises on high…

10 months ago

Over 1,000 Fake Domains Imitating Amazon Prime Day Target Online Shoppers

With Amazon Prime Day 2025 set for July 8th, millions of shoppers are gearing up for blockbuster deals. However, cybercriminals…

10 months ago

NSB Issues Warning on Cybersecurity Threats Posed by Popular Chinese Apps – Rednote, Weibo, TikTok, WeChat, and Baidu Cloud

The National Security Bureau (NSB) of Taiwan has issued a critical warning about the cybersecurity risks associated with five widely…

10 months ago

DarkForums Leak Unveils China’s ‘Hack-for-Hire’ Operations – VenusTech & Salt Typhoon Exposed

In a development sending ripples through the cybersecurity world, two new datasets have surfaced for sale on DarkForums, an English-language…

10 months ago

APT36 Exploits BOSS Linux Systems Using Malicious ZIP Files to Harvest Confidential Information

The Indian defense sector is facing a new wave of targeted cyber espionage as threat intelligence firm CYFIRMA uncovers a…

10 months ago