LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected
LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected Pierluigi Paganini August 17, 2026 The SANDCLOCK…
Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Credentials
Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Credentials Pierluigi Paganini July 26, 2026 Hackers compromised hotel Wi-Fi…
Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here’s What We Know.
Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here’s What We Know. Pierluigi Paganini July…
Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices
Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices Pierluigi Paganini July 11, 2026 Binarly found six…
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution
Dec 30, 2026Ravie LakshmananVulnerability / Email Security The Cyber Security Agency of Singapore (CSA) has issued a bulletin…
New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
Dec 24, 2025Ravie LakshmananMalware / Endpoint Security Cybersecurity researchers have discovered a new variant of a macOS information…
A Browser Extension Risk Guide After the ShadyPanda Campaign
In early December 2025, security researchers exposed a cybercrime campaign that had quietly hijacked popular Chrome and Edge…
Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data
Dec 09, 2025Ravie LakshmananMalware / Threat Analysis Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio…
Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks
Dec 06, 2025Ravie LakshmananAI Security / Vulnerability Over 30 security vulnerabilities have been disclosed in various artificial intelligence…
Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks
Bad actors are leveraging browser notifications as a vector for phishing attacks to distribute malicious links by means…
Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability
Nov 18, 2025Ravie LakshmananBrowser Security / Vulnerability Google on Monday released security updates for its Chrome browser to…
Microsoft Uncovers ‘Whisper Leak’ Attack That Identifies AI Chat Topics in Encrypted Traffic
Microsoft has disclosed details of a novel side-channel attack targeting remote language models that could enable a passive…