Intelligence Feed

1mo ago · hacker-news

A critical session isolation vulnerability in Writer, an enterprise AI platform, dubbed WriteOut, allowed attackers to hijack user accounts across tenants by exploiting the live preview feature. By tricking a logged-in user into clicking a malicious preview link, attackers could steal session cookies and gain full access to the victim's account, including sensitive data and administrative privileges. The vulnerability bypassed input filters by fetching and executing remote malicious scripts within a sandboxed environment.

1mo ago · hacker-news

U.S. prosecutors have linked 19-year-old Peter Stokes, allegedly part of the Scattered Spider hacking group, to a May 2025 breach of a luxury jewelry retailer. The attackers used social engineering to manipulate the IT help desk into resetting passwords and bypassing multifactor authentication, then deployed tunneling tools like ngrok and Teleport to exfiltrate over 77 GB of data. Despite ransomware deployment being blocked, the attackers demanded $8 million in cryptocurrency. The FBI traced Stokes via a persistent Windows device ID tied to Microsoft account activity and correlated IP addresses from his online accounts.

1mo ago · hacker-news

Researchers at Noma Security discovered a technique called GitLost that exploits indirect prompt injection to manipulate GitHub Agentic Workflows into leaking private repository data. The attack involves a malicious public GitHub issue that tricks an AI agent with read access into pulling and publicly commenting sensitive contents from private repositories. This highlights an architectural risk in AI agents that combine access to private data, untrusted input, and public output channels, creating a data exfiltration path without requiring stolen credentials or direct access.

1mo ago · hacker-news

A phishing campaign leveraging Microsoft's device-code flow has been observed targeting Microsoft 365 accounts using collaboration-themed lures. The attack abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass MFA, tricking users into authorizing an attacker-controlled session. The campaign, linked to reusable tooling called DEBULL, shares tactics with Storm-2372 and is part of a growing trend in phishing-as-a-service (PhaaS) platforms like EvilTokens and ARToken that enable account takeover and business email compromise.

1mo ago · hacker-news

The integration of AI into software development pipelines has significantly expanded the software supply chain attack surface. AI coding assistants, autonomous agents, and model context protocols (MCP) introduce new risks, such as malicious dependency suggestions, poisoned tool descriptions, and prompt injection attacks. Traditional security scanning is insufficient as threats now originate from models, agents, and their configurations, not just code artifacts.

1mo ago · hacker-news

BeyondTrust has patched multiple critical vulnerabilities in its Remote Support (RS) and Privileged Remote Access (PRA) products. The most severe flaws, CVE-2026-40138 and CVE-2026-40139, allow unauthenticated attackers to bypass authentication and gain unauthorized access to appliances, including elevated privilege accounts, under specific configurations. Additional vulnerabilities could lead to denial-of-service conditions and unauthorized data access. While no active exploitation has been reported, past flaws in these products have been actively exploited to deploy web shells and backdoors, underscoring the urgency of patching.

1mo ago · hacker-news

CERT/CC has warned of a hidden administrative backdoor in multiple Tenda router firmware versions, tracked as CVE-2026-11405. The backdoor resides in the '/bin/httpd' binary and allows full administrative access by bypassing normal authentication using an undocumented 'rzadmin' password check. The vulnerability enables attackers to gain elevated privileges without valid credentials, leading to potential device takeover. No patch is currently available, and users are advised to disable remote management and change default LAN IP settings.

1mo ago · hacker-news

A critical 16-year-old use-after-free vulnerability in Linux's KVM hypervisor, dubbed 'Januscape' and tracked as CVE-2026-53359, allows guest virtual machines to escape to the host on both Intel and AMD x86 systems. The flaw resides in the shadow MMU code and can lead to host kernel corruption or full host code execution when exploited. The vulnerability affects any x86 environment hosting untrusted guests with nested virtualization enabled, posing a high risk to multi-tenant cloud environments.

1mo ago · hacker-news

An Iranian hacking group linked to the Ministry of Intelligence and Security (MOIS), tracked as Cavern Manticore, has been using a new modular command-and-control (C2) framework named Cavern to target Israeli organizations, particularly in the IT and government sectors. The attack leverages DLL side-loading via SysAid's software update mechanism, deploying a trojanized DLL (uxtheme.dll) that communicates with a C2 server and downloads additional malicious modules. These modules enable reconnaissance, data theft, lateral movement, and tunneling, with a sophisticated .NET-based architecture using mixed compilation formats to hinder analysis. The group exploits trusted relationships in the software supply chain and has shifted from broad reconnaissance to targeted data exfiltration across Middle Eastern sectors.

1mo ago · hacker-news

Threat actors are actively probing and attempting to exploit CVE-2026-20896, a critical vulnerability in Gitea Docker images that allows unauthenticated remote users to gain elevated access by spoofing the 'X-WEBAUTH-USER' HTTP header. The flaw arises from the default configuration trusting all IP addresses due to a wildcard in the 'REVERSE_PROXY_TRUSTED_PROXIES' setting. Exploitation attempts were detected just 13 days after public disclosure, with initial activity observed from a ProtonVPN IP address. Although no full exploitation has been confirmed yet, the risk remains high for unpatched internet-facing instances.

1mo ago · hacker-news

A suspected China-nexus threat actor is conducting a targeted cyber espionage campaign against Indian taxpayers, tax professionals, and corporate finance teams using spear-phishing emails impersonating the Indian Income Tax Department. The campaign, dubbed Operation DragonReturn, delivers DcRAT via a malicious fake tax filing utility to steal sensitive data and establish persistent access. The attackers use social engineering, DLL side-loading, image-based payload concealment, and Windows service persistence to maintain long-term access to compromised systems.

1mo ago · hacker-news

The article discusses how to evaluate AI-powered Security Operations Center (SOC) platforms in 2026, emphasizing the importance of real-time data correlation, full-lifecycle automation, and measurable outcomes. It contrasts true AI SOC platforms with 'bolt-on' AI solutions that offer limited automation. The focus is on architectural capabilities rather than marketing terms, with Exaforce's Exabots highlighted as an example of an agentic AI SOC platform performing detection, triage, investigation, and response. No specific malicious threat activity, threat actor, or compromise indicators are described.

1mo ago · hacker-news

The article covers multiple cyber threats including the disruption of the NetNut residential proxy network, which leveraged compromised home devices to route malicious traffic. Threat actors are targeting researchers with fake proof-of-concept repositories delivering the ChocoPoC RAT, while the Scattered Spider group is linked to extortion attempts. New malware such as Ousaban and browser-based ransomware exploit social engineering and legitimate browser APIs, and AI-driven attacks are increasing in sophistication, including indirect prompt injection and fake phishing pages generated via AI.

1mo ago · hacker-news

Researchers from the Hong Kong University of Science and Technology have demonstrated SKILLCLOAK, a technique that enables malicious AI agent skills to evade static scanners by using self-extracting packing and obfuscation methods. These cloaked skills hide payloads in ignored directories like .git/ or use character substitution and command splitting to bypass pattern-based detection, remaining undetected in over 90% of cases across eight tested scanners. The study also introduces SKILLDETONATE, a runtime behavioral checker that detects 97% of attacks by monitoring system-level activity, highlighting the insufficiency of static analysis alone. Real-world marketplaces already host malicious skills using similar evasion tactics, indicating active exploitation.

1mo ago · hacker-news

A vulnerability in Opera GX allowed malicious websites to silently install browser mods in the form of .crx files without user interaction, enabling attackers to exfiltrate sensitive data such as Gmail addresses via universal CSS injection. The attack exploited the browser's auto-install feature for mods, which applied malicious CSS rules across all visited sites, facilitating cross-site leak (XS-Leak) techniques. Although Opera patched the flaw in version 130.0.5847.89 and found no evidence of in-the-wild exploitation, the zero-click nature of the attack made it highly effective once triggered.

1mo ago · hacker-news

A new Java-based remote access trojan (RAT) named QuimaRAT has emerged as a malware-as-a-service (MaaS) offering, targeting Windows, Linux, and macOS systems. The malware features a modular architecture with encrypted plugins delivered from command-and-control (C2) infrastructure and supports cross-platform persistence mechanisms. It includes tools for stealthy delivery, such as browser-cache staging and fileless execution, while evading detection through trusted execution paths and obfuscation techniques.

1mo ago · hacker-news

Researchers at Shandong University have demonstrated a new data exfiltration technique called TrojPix, which leverages video cable emissions to leak data from air-gapped systems by modulating on-screen pixels imperceptibly. The method requires prior malware presence on the system but does not need admin rights or hardware modifications, enabling data transmission at up to 8.1 Mbps over distances up to 208 meters. This technique represents a significant advancement in covert channel speed and range, though it remains experimental and not yet observed in real-world attacks.

2mo ago · hacker-news

North Korean threat actors have been linked to a software supply chain attack involving malicious npm packages that impersonate legitimate Rollup polyfill tools. The packages, such as 'rollup-packages-polyfill-core' and 'rollup-runtime-polyfill-core', install secondary-stage malicious dependencies to steal developer secrets and enable remote access. The malware evades analysis environments, exfiltrates credentials, and supports interactive command execution, targeting developer workstations and CI/CD systems. This activity mirrors previous Lazarus-linked campaigns exploiting npm for credential theft.

2mo ago · hacker-news

Google, in collaboration with the FBI and other partners, has disrupted the NetNut residential proxy network, which leveraged over 2 million compromised home devices such as smart TVs and streaming boxes to route malicious traffic. The network, also known as Popa, was operated by publicly traded Israeli company Alarum Technologies and used deceptive apps to gain access without user consent. This infrastructure was exploited by cybercriminals and espionage groups for password-guessing attacks and to mask their locations. Google describes the action as a degradation rather than a complete takedown due to the network's reseller ecosystem, which allows it to persist under different brands.

2mo ago · hacker-news

PamStealer is a new macOS information stealer distributed via fake Maccy websites, impersonating a legitimate clipboard manager. It uses a two-stage infection chain, starting with a malicious AppleScript dropper that downloads a Rust-based payload. The malware validates the victim's login password using macOS PAM, establishes persistence, and steals credentials, browser data, cryptocurrency wallets, and iCloud Keychain contents before exfiltrating them to attacker-controlled servers.

2mo ago · hacker-news

Former European Parliament member Stelios Kouloglou was repeatedly targeted with Pegasus spyware during his tenure on the PEGA Committee, which investigated misuse of commercial spyware. Forensic analysis revealed two infections in October 2022 and March 2023, both exploiting a zero-click vulnerability in Apple's HomeKit (PWNYOURHOME) affecting iOS 15.5. The attacks coincided with key committee activities and may be linked to a Pegasus operator targeting multiple EU jurisdictions, possibly overlapping with a campaign against exiled journalists.

2mo ago · hacker-news

A threat actor known as Armored Likho is conducting cyber espionage and financially motivated attacks against government agencies and the power sector in Russia, Brazil, and Kazakhstan. The group uses a mix of modular RATs, infostealers, and tools like Go2Tunnel for remote access and data exfiltration. A new Python-based infostealer, BusySnake Stealer, has been identified, which steals credentials, cookies, screenshots, and documents while evading detection through obfuscation and dynamic code execution. The attacks begin with spear-phishing emails delivering malicious payloads via RAR archives or weaponized LNK files exploiting CVE-2025-9491.

2mo ago · hacker-news

A new modular malware framework dubbed Avalon has been discovered, capable of executing a multi-stage attack chain that includes credential theft, lateral movement, and ransomware deployment via its CrownX component. The attack begins with a phishing email containing a password-protected archive hosted on Proton Drive, which delivers a malicious ISO image. The framework employs advanced defense evasion techniques, disables recovery mechanisms, and exfiltrates sensitive data before encrypting systems. Notably, Avalon shows signs of AI-assisted development, lowering the barrier for less sophisticated actors to deploy complex malware.

2mo ago · hacker-news

A critical Linux kernel vulnerability dubbed 'Bad Epoll' (CVE-2026-46242) allows unprivileged users to escalate privileges to root, affecting Linux systems and Android devices. The flaw is a use-after-free race condition in the epoll subsystem, exploitable even from within Chrome's sandbox. A working proof-of-concept exists, though no active exploitation has been observed. The bug is patched in newer kernels, but older 6.1-based systems like the Pixel 8 remain unaffected.

2mo ago · hacker-news

Security firm runZero disclosed seven unpatched vulnerabilities in FatFs, a widely used filesystem library in embedded devices, which could allow attackers with physical access or control over firmware updates to achieve memory corruption and potential code execution. The most severe vulnerability, CVE-2026-6682, is a high-severity integer overflow in FAT32 volume mounting. Due to the decentralized nature of FatFs and lack of responsive upstream maintenance, downstream vendors must independently patch affected systems, increasing the risk of prolonged exposure across IoT, industrial, and consumer devices.

2mo ago · hacker-news

North Korean threat actors associated with the Contagious Interview campaign have launched the PolinRider operation, distributing 108 malicious packages and browser extensions across npm, Packagist, Go, and Google Chrome. The attack targets developers in the cryptocurrency sector through social engineering, compromising maintainer accounts to inject obfuscated JavaScript payloads into legitimate repositories. These payloads deliver second-stage malware such as DEV#POPPER RAT and OmniStealer by leveraging blockchain infrastructure and malicious VS Code task files, while using Git history manipulation to evade detection.

2mo ago · hacker-news

A U.S. government entity, likely Union County, Ohio, paid approximately $1 million to a threat actor named Kairos following a data theft extortion incident. Unlike traditional ransomware attacks, Kairos did not encrypt systems but instead exfiltrated sensitive data—including files from the prosecutor's office—and threatened to leak it unless paid. The attack highlights a growing trend of pure data-theft extortion, where the leverage is the threat of public data disclosure rather than encryption. The payment of 9.44 BTC was traced through blockchain to exchanges including Bybit, OKX, and the Russian service BELQI, but no confirmation of data deletion was verifiable.