Search Results

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments. "LabubaRAT creates a reusable foothold for hands-on activity," Blackpoint Cyber researchers Sam Decker and Nevan Beal said in an analysis published today. "Once deployed, it can profile the host,

The Hacker NewsJuly 14, 20261 min read

Reviving a 15-year-old netbook with Arch Linux

Matched "Hacker News"Found in Description

TechnologyNews

Reviving a 15-year-old netbook with Arch Linux

191 points 119 comments on Hacker News · parksb.github.io

Hacker NewsJuly 14, 20261 min read

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

Cybersecurity researchers have disclosed details of two access control-related flaws impacting the RabbitMQ message broker service that could allow attackers to leak OAuth client secrets, expose enterprise messaging infrastructure to takeover risks, and bypass tenant boundaries. Miggo's security team, which discovered and reported the flaws, said one "leaks the broker's confidential OAuth

The Hacker NewsJuly 14, 20261 min read

11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

Cybersecurity researchers have discovered 11 old, Microsoft-signed, Unified Extensible Firmware Interface (UEFI) applications that could be abused to bypass Secure Boot on most systems using the modern firmware standard. "An attacker exploiting one of these vulnerable applications can execute untrusted code during system boot, enabling deployment of malicious UEFI bootkits or other malware,"

The Hacker NewsJuly 14, 20261 min read

Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the wallets themselves leak enough to link and track the people using them. The way these wallets talk to websites and blockchain servers can tie a person's separate addresses together and let outsiders follow them from site to site. And on a site that already holds a name or

The Hacker NewsJuly 14, 20261 min read

How Pentera Turns AI Security Workflows into Validation Engines

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

How Pentera Turns AI Security Workflows into Validation Engines

AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat intelligence, configuration findings, and exposure data. That fragmentation matters because attackers do not move through environments one

The Hacker NewsJuly 14, 20261 min read

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and validate stolen credentials in Microsoft Entra ID environments, without ever generating a successful sign-in event that would otherwise alert defenders. And bad actors have begun

The Hacker NewsJuly 14, 20261 min read

Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher publishing as cereblab, testing version 0.2.93, captured one of those uploads, cloned the git bundle out of the intercepted request, and pulled back a file the agent had been told in plain terms not

The Hacker NewsJuly 14, 20261 min read

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors' and other cybercriminals' malicious activities, including ransomware attacks against Americans. The VPN, named First VPN Service (1VPNS), has been accused of offering its tools to ransomware groups, along with its 45-year-old Ukrainian

The Hacker NewsJuly 14, 20261 min read

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers who might install them. The operators used the registry as free hosting for a booby-trapped proxy site and let the students who came to dodge

The Hacker NewsJuly 14, 20261 min read

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw in the platform. The way in has been the trust the organization had already extended, usually through the OAuth connections that tie Salesforce to the apps and third-party vendors around it. In 

The Hacker NewsJuly 14, 20261 min read

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Matched "Hacker News"Found in Source

SecuritySecurity Advisory

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based wrappers, CrashStealer is implemented in native C++, according to Jamf Threat Labs. "It validates the victim's login password locally before

The Hacker NewsJuly 13, 20261 min read

Search Results

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Reviving a 15-year-old netbook with Arch Linux

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

How Pentera Turns AI Security Workflows into Validation Engines

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Top Discussion

Filters