Cybercrime

Trusted Chrome, Edge extensions weaponized in supply chain campaign

The findings raise questions over whether existing endpoint and network controls provide enough visibility into malicious activity happening inside the browser.

GPUThor hardware attack can root Nvidia GPU systems

The new attack bypasses ECC protection on systems running Nvidia GPUs and can produce double- and triple-bit errors, researchers show.

AI helps Chinese-speaking hackers speed up attacks on exposed servers

The campaign highlights why internet exposure, exploit availability, and faster containment are becoming more important factors in how CISOs prioritize risk.

Backdoored Rust packages hit crates.io, exposing developers to malware at build time

Researchers found significant infrastructure overlap between the attack on three Rust crates and recent North Korea-linked campaigns.

Insignary Closes SBOM Accuracy Gap With Binary-Level Clarity for Regulatory Risk

Kriminal breaks out of Grok, Claude guardrails at $12.99

The criminal AI service uses jailbreaks to bypass safeguards on legitimate AI models and offers capabilities including exploit development, OSINT, and social engineering.

New Malware turns Microsoft cloud into its control center

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure.

What you say during a cyber breach can — and will — be used against you

Cyber breach communications can become costly evidence, making disciplined documentation and privilege practices essential from day one.

New macOS malware turns stolen browsers into attacker-controlled sessions

AmnesiaStealer tricks users into pasting Terminal commands from a fake GitHub page before harvesting credentials, cookies and documents.

Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks

Reco has identified a new attack vector that is similar to ShinyHunters’ methods.