GoKawiil
CISA exposes malware kits deployed in Ivanti EPMM attacks
(bleepingcomputer.com)
91.
92.
Tinycolor supply chain attack post-mortem
(news.ycombinator.com)
93.
Microsoft adds malicious link warnings to Teams private chats
(bleepingcomputer.com)
94.
Hackers left empty-handed after massive NPM supply-chain attack
(bleepingcomputer.com)
95.
Hackers steal 3,325 secrets in GhostAction GitHub supply chain attack
(bleepingcomputer.com)
96.
6 browser-based attacks all security teams should be ready for in 2025
(bleepingcomputer.com)
97.
Threat actors abuse X’s Grok AI to spread malicious links
(bleepingcomputer.com)
99.
How RubyGems.org protects OSS infrastructure
(news.ycombinator.com)
100.
Malicious Android apps with 19M installs removed from Google Play
(bleepingcomputer.com)
101.
LLMs and coding agents are a security nightmare
(news.ycombinator.com)
102.
LLMs and Coding Agents = Security Nightmare
(news.ycombinator.com)
103.
DoubleAgents: Fine-Tuning LLMs for Covert Malicious Tool Calls
(news.ycombinator.com)
104.
60 malicious Ruby gems downloaded 275,000 times steal credentials
(bleepingcomputer.com)
105.
Fake WhatsApp developer libraries hide destructive data-wiping code
(bleepingcomputer.com)
106.
Wave of 150 crypto-draining extensions hits Firefox add-on store
(bleepingcomputer.com)
107.
Attackers exploit link-wrapping services to steal Microsoft 365 logins
(bleepingcomputer.com)
108.
Inside a Real Clickfix Attack: How This Social Engineering Hack Unfolds
(bleepingcomputer.com)
109.
Flaw in Gemini CLI AI coding assistant allowed stealthy code execution
(bleepingcomputer.com)
110.
Hackers breach Toptal GitHub account, publish malicious npm packages
(bleepingcomputer.com)
111.
Firefox-patch-bin, librewolf-fix-bin AUR packages contain malware
(news.ycombinator.com)
112.
GitHub abused to distribute payloads on behalf of malware-as-a-service
(arstechnica.com)
113.
Beware! Research shows Gmail’s AI email summaries can be hacked
(androidauthority.com)
114.
Google Gemini flaw hijacks email summaries for phishing
(bleepingcomputer.com)
115.
Malicious Chrome extensions with 1.7M installs found on Web Store
(bleepingcomputer.com)
116.
Dozens of fake wallet add-ons flood Firefox store to drain crypto
(bleepingcomputer.com)
117.
New FileFix attack runs JScript while bypassing Windows MoTW alerts
(bleepingcomputer.com)
118.
WinRAR patches bug letting malware launch from extracted archives
(bleepingcomputer.com)
119.
SonicWall warns of trojanized NetExtender stealing VPN logins
(bleepingcomputer.com)
120.