cyber security
Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Credential-Stealing Malware
A new XLoader infection chain. It hides the credential stealer inside an embedded LuaJIT interpreter.
It moves it into another Windows process through shared-section...
cyber security
Hackers Use Stolen Credentials to Fake Major Data Breaches and Pressure Companies for Money
Hackers are using exposed credentials to access limited corporate data, then presenting that access as evidence of major breaches to pressure companies into paying....
ChatGPT
Hackers Are Stealing ChatGPT and Claude Tokens That Changing Your Password May Not Stop
Infostealer malware is expanding into AI developer environments, harvesting authentication files that can preserve unauthorized access after a password reset.
SpyCloud reports recapturing more...
cyber security
Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers.
Rather than delivering one payload, the...
AI
Hackers Turn to AI Jailbreak Bundles as Researchers Uncover New Prompt Adware Technique
An AI jailbreak package that repeatedly modifies OpenAI Codex instructions to promote its author’s commercial service, showing how guardrail-bypass tools can double as advertising...
cyber security
Researcher Discovers Path Traversal Flaw in Renault Navigation System That Enables Root Code Execution
A malicious SD card can give an attacker root-level code execution on the TomTom Carminat LIVE navigation unit used in some Renault cars. Security...
cyber security
Microsoft Analyzes 383,000 Security Vulnerabilities and Reveals Which Flaws Hackers Exploit Most
Microsoft’s analysis of approximately 383,000 disclosed vulnerabilities shows that attackers overwhelmingly favor weaknesses enabling system takeover rather than exploiting vulnerabilities indiscriminately.
The research identifies...
cyber security
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware
A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects.
Check Point Research published its findings...