News — Pixelift

Security

112 articles
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
SecurityApr 6The Hacker News

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea
SecurityApr 6

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers
SecurityApr 6

How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools
SecurityApr 6

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks
SecurityApr 6

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
SecurityApr 6Krebs on Security

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation
SecurityApr 5

$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
SecurityApr 5

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
SecurityApr 5

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing
SecurityApr 3

China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing

Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers
SecurityApr 3The Hacker News

Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack
SecurityApr 3

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
SecurityApr 2

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise
SecurityApr 2

Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise

ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories
SecurityApr 2

ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories

CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
SecurityApr 1The Hacker News

CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails

Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
SecurityApr 1

Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass

Block the Prompt, Not the Work: The End of "Doctor No"
SecurityApr 1

Block the Prompt, Not the Work: The End of "Doctor No"

Android Developer Verification Rollout Begins Ahead of September Enforcement
SecurityMar 31

Android Developer Verification Rollout Begins Ahead of September Enforcement

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks
SecurityMar 31

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts
SecurityMar 31The Hacker News

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
SecurityMar 30

OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability

DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials
SecurityMar 30

DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials

⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More
SecurityMar 30

⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More