GitHub notifications abused to impersonate Y Combinator for crypto theft – Lifeboat News: The Blog
A massive phishing campaign targeted GitHub users with cryptocurrency drainers, delivered via fake invitations to the Y Combinator (YC) W2026...
Identifying Companies Affected by the Shai-Hulud NPM Supply Chain Attack
From September 14-16, over 180 NPM packages were compromised and used to deliver what is now called the Shai-Hulud worm....
FTC Sues Sendit Over Kid’s Data Collection
Cybercrime , Fraud Management & Cybercrime Also, Cyberattack Disrupts Asahi’s Japan Operations, Halts Production Anviksha More (AnvikshaMore) • October 2,...
Fuzzing IoT binaries with AFL++
In the previous part, we looked at fuzzing simple IoT binaries with AFL++. These programs accepted input from a file...
Cybercriminals are trying to extort executives with data allegedly stolen through Oracle tool
Hackers possibly connected to a prominent Russian ransomware gang are attempting to extort corporate executives by threatening to leak sensitive...
Self-Replicating Worm Hits 180+ Software Packages – Krebs on Security
At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that...
Automate 80% of IT Tickets with Natural Language Workflows
IT teams everywhere face the same challenge: endless requests for access, device troubleshooting, password resets and onboarding/offboarding checklists that drain...
Threat Hunting & AI In SOC
01 Oct Threat Hunting & AI In SOC | Ben McGavin, Justin Dolgos, Todd Willoughby (RSM) With Vladislav Babiuk Posted...
Rental Property Scam – Current Scams
How to identify a rental property scam The opportunity is too good to be true A rental property scam may...
TOTOLINK X6000R Routers Hit by Three Vulnerabilities Allowing Remote Code Execution
Three critical security flaws were discovered in firmware version V9.4.0cu.1360_B20241207 of the TOTOLINK X6000R router released on March 28, 2025....
