Intelligence Feed

1mo ago · bleeping-computer

Microsoft, in coordination with the Health-ISAC, law enforcement, and SpyCloud, disrupted the EvilTokens phishing-as-a-service (PhaaS) platform, which had compromised over 12,000 Microsoft accounts across 10,000 organizations. The threat actor, tracked as Storm-2992, offered AI-powered device-code phishing capabilities that bypassed MFA by abusing Microsoft's OAuth 2.0 device-authorization flow. The service enabled affiliates to conduct business email compromise (BEC) campaigns by harvesting credentials through phishing lures impersonating legitimate services and using AI to identify high-value targets within compromised inboxes.

1mo ago · securelist

MovieReaper is a modular, multi-stage malware framework distributed through compromised torrent files on popular trackers, primarily via the repository itorrents[.]org. The initial loader, disguised as movie files, downloads shellcode from a C2 server and uses the Solana blockchain to retrieve the address of a second C2, enhancing resilience against takedowns. The malware performs UAC bypass and establishes persistence by masquerading as a legitimate Microsoft binary, ultimately deploying a final implant that provides remote file system access with 21 commands for exfiltration and manipulation. Victims span multiple countries and sectors, including enterprise, government, and retail.

1mo ago · securelist

In April 2026, Kaspersky GERT responded to an incident at a Middle Eastern manufacturing organization where threat actors leveraged domain admin privileges to create malicious Group Policy Objects (GPOs) in Active Directory. The PAYLOAD GPO was used to deface endpoints with ransom notes, disable the local administrator account, and change wallpapers and lock screens without deploying any ransomware binary or encrypting files. A second GPO disabled Windows Firewall across the domain. Data exfiltration was observed, and the attack remained dormant until endpoints rebooted. The actors used living-off-the-land techniques to evade traditional detection, demonstrating an encryptionless extortion model.

1mo ago · hacker-news

The TASK#STOMP campaign delivers a PowerShell-based backdoor that steals business documents, Wi-Fi passwords, clipboard contents, and screenshots while enabling remote command execution. The infection begins with a malicious VBScript file ('95c9050t66.vbs') executed via wscript.exe, which establishes persistence through scheduled tasks and the Windows Startup folder. The malware uses two redundant PowerShell modules—sys_loader.ps1 and win_conn.ps1—that communicate with C2 domains corecloudfileshare[.]xyz and attachmentsharingdrive[.]xyz, and maintain mutual watchdog functionality to ensure persistence. The attack leverages living-off-the-land techniques, including encoded scripts, timestomping, and abuse of native Windows components to evade detection.

1mo ago · hacker-news

A vulnerability in WordPress core, tracked as CVE-2026-93485 and dubbed 'Comment2Shell', allows an unauthenticated attacker to inject a malicious script via a crafted comment. When a logged-in administrator views the compromised page, the script executes in their browser context, enabling exploitation of admin privileges to upload a plugin containing a web shell, leading to remote code execution (RCE) on the server. The flaw exists due to improper handling of HTML during comment rendering, where a line break inside an attribute of an allowed tag can be manipulated to create an auto-executing event handler. The vulnerability affects WordPress versions from 4.7 to 7.1 and was patched in version 7.1.1 and other corresponding security releases.

1mo ago · hacker-news

Security researcher Patrick Wardle demonstrated a proof-of-concept exploit against Meta's Muse AI assistant on macOS, showing that malware with user-level access can hijack Muse by modifying a hidden preference setting. This allows attackers to redirect voice dictation to a malicious endpoint, enabling theft of the user's Muse authentication token, manipulation of AI prompts, and remote control of Muse across devices. The flaw does not require elevated privileges and bypasses typical malware detection since actions are performed by the legitimate, signed Muse app. Meta has reportedly deployed a fix, but no official advisory has been published.

1mo ago · hacker-news

The Pakistan-based threat actor SideCopy has expanded its targeting to include academic institutions in India, using spear-phishing campaigns to deliver a remote access trojan called ReverseRAT. The attack chain begins with a malicious LNK file disguised as a PDF document, which executes an obfuscated HTA file via mshta.exe to load a reflective DLL payload. The malware establishes persistence through Windows Registry Run Keys, performs multi-stage in-memory deobfuscation, and exfiltrates data to a C2 server using encrypted traffic over port 5863.

1mo ago · bleeping-computer

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-7273, a high-severity stack-based buffer overflow vulnerability in Zyxel GS1900 series switches, to its Known Exploited Vulnerabilities (KEV) Catalog due to active exploitation. The flaw allows unauthenticated threat actors on the local network to execute arbitrary operating system commands via malicious HTTP requests. CISA mandated federal agencies to patch affected systems by Thursday under Binding Operational Directive 26-04. GreyNoise reported that a suspected Chinese-speaking malicious cyber actor has exploited the vulnerability to compromise nearly 1,000 switches globally, exfiltrating sensitive data from 996 devices across 48 countries.

1mo ago · bleeping-computer

Security researcher Abdelhamid Naceri (Nightmare Eclipse) disclosed a new Windows Defender zero-day vulnerability named BigDiskBuster, which allows standard users to block Microsoft antivirus definition updates by preventing Defender from performing platform and signature updates. The exploit affects all supported Windows versions and must run in the background to be effective. This is part of an ongoing series of zero-day releases by the researcher in response to a dispute with Microsoft, who has patched some but not all of the disclosed flaws.

1mo ago · bleeping-computer

BigCommerce notified multiple merchants of a data breach resulting from compromised credentials for third-party Ribon and Ribon 1.5 applications, operated by Be A Part Of (a Fastr company). Attackers used the stolen application keys between September 13 and 17, 2026, to access customer data in BigCommerce stores, including names, email addresses, phone numbers, and shipping addresses. The platform confirmed that its core systems were not breached and that payment and password data remained secure. Malicious scripts were injected into affected merchant storefronts, and BigCommerce uninstalled the apps to revoke access.

1mo ago · hacker-news

Security researchers from Hacktron exploited a chain of vulnerabilities starting with a flaw in the libheif library (CVE-2026-32882) used by OpenAI's public Discourse forum, enabling remote code execution on the server. Leveraging AI assistance from Claude Opus 5, they bypassed ASLR protections and gained access to the forum server. Due to OpenAI's shared single sign-on (SSO) system, this allowed them to take over staff accounts on ChatGPT and Codex, ultimately accessing an internal code repository. The attack demonstrated how a vulnerability in a low-trust public service could lead to compromise of high-value internal systems when linked via SSO.

1mo ago · hacker-news

North Korean threat actors associated with the Contagious Interview campaign have compromised over 30,000 devices across more than 100 countries since at least 2022, targeting software developers and IT professionals in cryptocurrency, blockchain, and Web3 sectors. The attackers pose as recruiters on platforms like LinkedIn, offering fake job opportunities that lead to multi-stage malware infections. Malware families deployed include BeaverTail, InvisibleFerret, and RATatouille, enabling credential theft, cryptocurrency theft, and lateral movement into corporate networks. A related operation uses Western proxies recruited via Discord to bypass sanctions and identity checks, with North Korean IT workers using AI-generated identities to secure remote jobs and steal funds.

1mo ago · hacker-news

A malicious fake LastPass Authenticator installer distributed via a spoofed GitHub repository uses DLL side-loading to execute a malicious payload that disables antivirus and EDR solutions by loading a Microsoft-signed kernel driver. The driver, named Alinubx.sys, is a renamed version of the known CcProtect.sys driver from CnCrypt, signed through Microsoft's Windows Hardware Compatibility Publisher program. Once loaded, it terminates over 140 security processes from kernel mode, enabling a password stealer—identified as Rapuncel, related to BoryptGrab—to harvest credentials from browsers, cryptocurrency wallets, and messaging apps. The malware evades detection by renaming a known vulnerable driver, bypassing VirusTotal and Microsoft's driver blocklist due to hash changes.

1mo ago · bleeping-computer

A pre-authenticated remote code execution vulnerability in WordPress Core, dubbed 'Click2Shell', allows attackers to force-install a theme from the WordPress.org catalog and execute arbitrary PHP code via a Customizer preview. The exploit chain does not require attacker authentication but relies on a logged-in administrator visiting a crafted URL. The vulnerability was patched in WordPress 7.1.1, which fixes improper escaping of the theme slug in jQuery selectors and restricts selector scope to legitimate theme cards. Successful exploitation could lead to full server compromise, including access to database credentials and creation of rogue admin accounts.

1mo ago · bleeping-computer

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert warning of active exploitation of three Linux kernel vulnerabilities. One of the flaws, CVE-2025-39964, has existed for 14 years and was demonstrated to enable privilege escalation and container escape. Public exploits exist for CVE-2025-39682 and CVE-2026-53266, with the latter having a potential privilege escalation path inferred from prior vulnerabilities like Dirty Pipe. Federal agencies are ordered to patch affected systems immediately and conduct forensic triage to detect prior compromise.

1mo ago · google-project-zero

A privilege escalation vulnerability in Windows, tracked as CVE-2026-66804, stems from a dangling COM object registration for the CrossDevice COM object. The registration points to a non-existent DLL in a user-writable directory (%PROGRAMDATA%\CrossDevice\CrossDevice.Streaming.Source.dll), enabling DLL planting. An attacker can exploit this by creating a malicious DLL and triggering its load via custom COM marshaling. A specific COM service, 'Shell Create Object Handler' (CLSID {135fd325-45b7-4c30-89f8-4386961669f0}), running as SYSTEM and allowing custom marshaling, is abused to achieve privilege escalation by passing a crafted OBJREF referencing the dangling CLSID.

1mo ago · hacker-news

Threat actors are using ClickFix-style social engineering lures to distribute a new remote access trojan (RAT) named ChainScript, which provides extensive remote control capabilities including command execution, file operations, screenshot capture, and cryptocurrency wallet theft. The malware uses a malicious Windows installer disguised as legitimate software (e.g., Spotify) to deploy a Node.js-based JavaScript agent via PowerShell and VBScript stages, establishing persistence through scheduled tasks and Registry Run keys. ChainScript employs a novel C2 discovery mechanism leveraging a Polygon blockchain smart contract to dynamically rotate WebSocket-based command-and-control infrastructure, enhancing resilience against takedowns. This campaign overlaps with another abuse of HBO Max's Reddit account, distributing macOS and Windows malware such as MacSync, Atomic Stealer, and Amatera Stealer under the PasteSwitch operation.

1mo ago · bleeping-computer

Security researchers discovered two sandbox escape vulnerabilities in OpenAI's Codex that allowed untrusted code to execute commands on the host system. The more severe, named Heapjack, exploited shared memory in a Node.js process to steal a UUID token and gain unauthorized access to a privileged parent process, enabling remote code execution without user interaction. The second flaw, Overpatch, abused a patch utility in Codex CLI to escalate file write permissions and modify files outside the intended directory via symlink manipulation. Both vulnerabilities were fixed by OpenAI within eight days of disclosure.

1mo ago · bleeping-computer

A malicious npm campaign distributed counterfeit packages, including 'indexed-btree', designed to mimic the legitimate 'sorted-btree' library. The threat evades npm's install-script restrictions by embedding malicious logic in runtime code—specifically within the BTree.prototype.set() method—triggering execution only when called with a specific key. The malware collects system information, exfiltrates it via Slack and Telegram, and communicates with a C2 server through an Ethereum smart contract on the Sepolia test network using encrypted payloads. The attackers also created nine additional malicious packages with fabricated repositories and commit histories to appear legitimate.

1mo ago · bleeping-computer

North Korean threat actor WaterPlum conducted a global campaign from December 2025 to July 2026, compromising over 30,000 devices and stealing more than $10.7 million in cryptocurrency. The group targeted job seekers by impersonating legitimate companies and delivering malware through malicious npm packages and Visual Studio Code projects. WaterPlum deployed multiple malware families including BeaverTail, InvisibleFerret, OtterCookie, OtterCandy, and StoatWaffle to steal credentials, cryptocurrency keys, and conduct espionage. The actors are linked to North Korea's 313 General Bureau and operate alongside fraudulent IT worker operations using stolen identities and AI face-swapping during fake interviews.

1mo ago · bleeping-computer

Security researcher Gal Weizman discovered a new attack technique called BragJack that hijacks AI browser agents through malicious browser extensions. The proof-of-concept targets AI assistants in Chromium-based browsers including Google Chrome's Gemini Live, Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome by exploiting trust relationships and browser extension capabilities. The attacks use declarativeNetRequest (DNR) rules to manipulate trusted components, enabling unauthorized access to sensitive data and control over AI agents without user interaction. The technique, dubbed 'Prompt Forcing,' allows attackers to send full prompts and instructions to the AI agent, leveraging its legitimate privileges to perform malicious actions.

1mo ago · hacker-news

SolarWinds has patched a high-severity vulnerability, CVE-2026-28326, in its Access Rights Manager (ARM) product that could allow unauthenticated remote code execution due to a hard-coded static key. The flaw affects all versions prior to 2026.2.1 and has been assigned a CVSS score of 8.8. The vulnerability was discovered and reported by Armadin security researcher Kai Huang, but there is no evidence of in-the-wild exploitation to date.

1mo ago · bleeping-computer

The ShinyHunters cybercrime group breached the Clop ransomware gang's data leak site by exploiting an unauthenticated file upload vulnerability in Grav CMS. They defaced the Tor-based site with ASCII art of Umbreon, their logo, and claimed to have stolen server data including source code, system logs, and the private keys for Clop's onion service. ShinyHunters stated they plan to extort Clop and published a message via the compromised site, marking an escalation in an ongoing feud between the two threat groups.

1mo ago · hacker-news

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to evidence of active exploitation in the wild. The vulnerabilities—CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964—allow local attackers to achieve memory disclosure, denial-of-service, or local privilege escalation. Red Hat has acknowledged active exploitation and labeled the flaws as high risk, urging immediate remediation. Federal agencies are required to patch these vulnerabilities by September 21, 2026, per Binding Operational Directive 26-04.

1mo ago · hacker-news

CrowdSec disclosed that approximately 170 of its private GitHub repositories were copied on May 22, 2026, due to a supply chain attack stemming from the compromise of a former employee's laptop via malicious TanStack npm packages. The attacker leveraged a GitHub OAuth token from the former employee's account, which had not been revoked promptly after departure. The breach exposed source code, including internal automation scripts, data science models, and the consensus algorithm used in its blocklist system, as well as sensitive information such as 83 user email addresses and investor details from 2020. The initial compromise is linked to CVE-2026-45321, a supply chain attack on TanStack that stole developer credentials.

1mo ago · hacker-news

A critical pre-authentication remote code execution (RCE) vulnerability, CVE-2026-58138, in Orkes Conductor Workflow Platform is being actively exploited in the wild. The flaw exists in versions prior to 3.30.2 and allows unauthenticated attackers to execute arbitrary OS commands by submitting malicious workflow definitions containing JavaScript or Python expressions to the Conductor API endpoint. Exploitation leverages unsandboxed GraalVM evaluators with unrestricted host access, enabling command execution via Java reflection or subprocess calls. Attack attempts have been observed globally, with significant activity originating from Germany, Hong Kong, Indonesia, the U.A.E., and India, and telemetry from multiple security firms confirming ongoing exploitation.

1mo ago · datadog-security-labs

Datadog Security Research has identified two credential harvesting platforms, Loot and UltraVault, which are used to inventory, validate, and exploit stolen credentials, including API keys for cloud and AI services. The platforms are accessible without authentication and support automated validation and post-exploitation actions, such as re-probing credentials and recommending local privilege escalation exploits. The attacker infrastructure has been observed abusing Amazon Bedrock through API calls like GetCallerIdentity, ListFoundationModels, and InvokeModel, indicating active exploitation of compromised AWS credentials, including both long-term and temporary STS credentials.

1mo ago · socket-dev

Shai-Hulud is a self-propagating worm that first appeared on npm in September 2025 by compromising the @ctrl/tinycolor package, which had over two million weekly downloads. The worm harvested credentials using TruffleHog, exfiltrated data to a public GitHub repository named Shai-Hulud, and used stolen npm tokens to propagate to other packages maintained by the victim. It established persistence via GitHub Actions workflows and evolved through multiple waves in late 2025 and 2026, with increasing sophistication and destructive capabilities. In May 2026, the source code was released publicly by TeamPCP, leading to widespread replication and new campaigns, including one leveraging short-lived OIDC tokens in CI environments. The original authors remain unattributed, though two alleged members of TeamPCP were arrested in August 2026.

1mo ago · talos

Cisco Talos reports on a rising ransomware threat landscape in Japan, with a nearly 5% increase in incidents in the first half of 2026. Two prominent ransomware actors, 'The Gentlemen' and 'Qilin', are driving this surge. Qilin leverages generative AI to accelerate attacks by creating destructive scripts, while The Gentlemen uses legitimate red-teaming tools like AdaptixC2 to blend in and evade detection. Both groups target small- and medium-sized enterprises using double-extortion tactics, emphasizing the need for improved credential management, MFA enforcement, and updated defenses using available Snort rules.

1mo ago · hacker-news

Security researcher Asim Manizada publicly released exploit code for four Linux kernel vulnerabilities—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—that enable local privilege escalation to root. All four flaws are memory-safety bugs in kernel networking code, with CVEs assigned and fixes available in updated kernel versions. While no in-the-wild exploitation has been reported, the public release of working, targeted exploits increases risk for unpatched systems, especially shared or multi-user environments. DiagSpill is particularly concerning as it requires no special privileges, only the SCTP module being loaded with non-default options.