Explore

Trendline Trendline
Mini Shai-Hulud Malware Attack Compromises Hundreds of Open-Source Packages

Mini Shai-Hulud Malware Attack Compromises Hundreds of Open-Source Packages

Mini Shai-Hulud Malware Attack Compromises Hundreds of Open-Source Packages
Trendline Trendline
RubyGems Suspends Registrations Following Malicious Package Attack

RubyGems Suspends Registrations Following Malicious Package Attack

RubyGems Suspends Registrations Following Malicious Package Attack
Rapid Read Rapid Read
Hackers Exploit Fake Job Interviews to Deploy Trojan Viruses on PCs

Hackers Exploit Fake Job Interviews to Deploy Trojan Viruses on PCs

Hackers are using fake job interviews to install a Trojan virus, named 'JobStealer', on victims' PCs. According to antivirus software Dr.Web, these cybercriminals contact job seekers and invite them to interviews via a fake video conferencing app, which prompts users to download malicious software. The virus collects data such as system information, browser extensions, passwords, and notes, which are then uploaded to a server. The primary aim of this virus is to steal cryptocurrency wallets. The virus is available for macOS and Windows, with potential plans to expand to iOS, Android, and Linux. Dr.Web's antivirus software can detect and remove the virus.
Rapid Read Rapid Read
CRPx0 Malware Campaign Exploits Free OnlyFans Lure for Cyber Attacks

CRPx0 Malware Campaign Exploits Free OnlyFans Lure for Cyber Attacks

A new malware campaign, CRPx0, is targeting users through a social engineering tactic involving free OnlyFans accounts. The malware affects macOS and Windows systems, with potential Linux capabilities in development. It focuses on cryptocurrency theft, data exfiltration, and ransomware deployment. The campaign uses a malicious zip file disguised as OnlyFans account credentials to install malware on victims' systems. Once installed, the malware can steal cryptocurrency by altering wallet addresses and exfiltrate sensitive data, which is then used for double extortion through ransomware.
Rapid Read Rapid Read
Instructure Reaches Agreement with Hackers Following Data Breach

Instructure Reaches Agreement with Hackers Following Data Breach

Instructure, the company behind the Canvas learning platform, has announced an agreement with the hacker group ShinyHunters, which attacked its systems twice. The initial attack occurred on April 29, during which the hackers claimed to have stolen personal data of approximately 275 million students and staff. The group later attacked again, defacing login pages on school websites to pressure Instructure. The company has stated that the hackers provided evidence of deleting the stolen data and assured that customers would no longer face blackmail. However, Instructure did not disclose the financial terms of the agreement or confirm if any payment was made. The U.S. government and security experts generally advise against paying cybercriminals, as it may encourage further criminal activities.
Rapid Read Rapid Read
Instructure Reaches Agreement with Hackers Following Data Breaches Affecting Schools

Instructure Reaches Agreement with Hackers Following Data Breaches Affecting Schools

Instructure, the company behind the Canvas educational platform, has reached an agreement with hackers who breached its systems twice, compromising data from millions of students and staff. The cybercrime group ShinyHunters claimed responsibility for the breaches, which affected nearly 9,000 schools. The hackers initially stole personal information of 275 million individuals and later defaced Canvas login pages to pressure Instructure into paying a ransom. Instructure announced that the hackers have provided evidence of data destruction and assured that Canvas customers will not face extortion. However, the financial terms of the agreement remain undisclosed. The FBI has advised against paying ransoms, as it encourages further cybercriminal activity.
Trendline Trendline
Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack Affecting Users

Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack Affecting Users

Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack Affecting Users
Rapid Read Rapid Read
JDownloader Site Hacked to Distribute Python RAT Malware to Users

JDownloader Site Hacked to Distribute Python RAT Malware to Users

The website for JDownloader, a popular download manager, was compromised to distribute malicious installers for Windows and Linux. The attack, which occurred between May 6 and May 7, 2026, involved altering download links on the official site to point to malicious payloads. The Windows payload deployed a Python-based remote access trojan (RAT). The breach was first reported by a Reddit user who noticed that the installers were flagged as malicious by Microsoft Defender. The JDownloader developers confirmed the compromise, stating that attackers exploited an unpatched vulnerability in the website's content management system. This allowed them to change access control lists and content without authentication. The attack affected only the alternative Windows installer and the Linux shell installer links, while other download methods remained secure. Users are advised to verify the legitimacy of installers by checking digital signatures and to reinstall their operating systems if they executed the compromised ...
Rapid Read Rapid Read
Debian Release Team Mandates Reproducible Packages for Future Releases

Debian Release Team Mandates Reproducible Packages for Future Releases

The Debian release team has announced a significant policy change requiring all future Debian releases to include reproducible packages. This decision is part of the ongoing Reproducible Builds effort, which aims to ensure that independent users can recreate package builds and binaries bit-for-bit. This initiative is crucial for enhancing security and verifying the authenticity of packages. As a result, Debian 14.0 will be the first major release to adhere to this new mandate. The migration software used by Debian will now block the migration of new packages that cannot be reproduced or existing packages that regress in reproducibility. Additionally, the Debian release team has added support for the LoongArch 64-bit architecture, known as 'Loong64', to the archive, following plans announced last year.
Trendline Trendline
Debian Release Team Mandates Reproducible Packages for Enhanced Security

Debian Release Team Mandates Reproducible Packages for Enhanced Security

Debian Release Team Mandates Reproducible Packages for Enhanced Security
Rapid Read Rapid Read
Linux Kernel Vulnerabilities Prompt Urgent Patches Following Disclosure Breach

Linux Kernel Vulnerabilities Prompt Urgent Patches Following Disclosure Breach

Major Linux distributions are urgently releasing patches to address two newly discovered vulnerabilities in the Linux kernel, collectively known as 'Dirty Frag'. These vulnerabilities, identified by security researcher Hyunwoo Kim, involve a local privilege escalation flaw that could allow attackers to gain root access on affected systems. The vulnerabilities were disclosed prematurely, leading to a rush in patch development. The flaws, tracked as CVE-2026-43284 and CVE-2026-43500, have been present in the kernel for several years, posing significant security risks.
Reuters Reuters
Hackers pushing innovation in AI-enabled hacking operations, Google says

Hackers pushing innovation in AI-enabled hacking operations, Google says

By AJ Vicens and Sam Tabahriti May 11 (Reuters) - Hackers from a prominent cybercrime group used artificial intelligence to uncover a previously unknown software flaw and an exploit to take advantage of it for the first time, Alphabet's Google said on Monday.