Intelligence Feed

2mo ago · hacker-news

Two trojanized npm packages, 'bianira-ui' and 'fluid-type-ui', have been identified as part of a malicious campaign leveraging a novel blockchain-based command-and-control (C2) technique dubbed NullReceiver. This method, attributed to North Korean threat actors, encodes the C2 server IP address within the recipient address of zero-value Ethereum transactions, eliminating the need for smart contracts or calldata payloads. The malware decodes the IP address from the first four bytes of the transaction's destination address and connects to it, with the decoded IP being 166.88.134[.]62. The technique improves stealth and resilience by using throwaway addresses and minimizing on-chain footprint.

2mo ago · hacker-news

Two critical vulnerabilities in Paperclip, an open-source AI agent control plane, allow remote code execution on server or developer machines via malicious agent imports. CVE-2026-41679 enables unauthenticated attackers to register and import a malicious agent configuration that executes commands with server privileges due to insufficient access controls during company creation. A second path exploits DNS rebinding in local_trusted mode, where a malicious website can trigger command execution on localhost by rebinding a hostname to 127.0.0.1 and invoking the import API. A third vulnerability, GHSA-xfqj-r5qw-8g4j, exposes sensitive API routes without proper authentication, potentially leaking control-plane details and allowing unauthorized access to heartbeat data and system health information.

2mo ago · hacker-news

A macOS-focused threat operation leveraging over 250 front-end domains employs browser fingerprinting to selectively serve malware lures to genuine Mac users while evading crawlers and sandbox environments. The fingerprinting script collects navigator properties, screen dimensions, WebGL signals, timezone, iframe detection, touch support, developer console activity, and codec capability checks to determine if the visitor is a real Mac user. Qualified users are presented with a fake GitHub-themed 'Download for macOS' page that delivers the Atomic Stealer (AMOS) infostealer via an obfuscated Terminal command. The command retrieves additional scripts from a /curl/<id> endpoint and executes payloads that target credentials, browser data, authentication stores, cryptocurrency wallets, and sensitive files.

2mo ago · hacker-news

Veeam, HashiCorp, and Django have released patches for critical vulnerabilities in their software. Veeam's Service Provider Console has two critical flaws: CVE-2026-58073 allows unauthenticated attackers to impersonate managed agents and steal credentials (CVSS 9.5), and CVE-2026-58072 enables arbitrary file write leading to remote code execution with low-privilege access (CVSS 9.0). HashiCorp's Terraform MCP Server has a CVSS 10.0 cross-tenant vulnerability (CVE-2026-16498) due to improper session isolation in stateless HTTP mode, allowing token reuse across users. Django patched a high-severity flaw in GeoDjango (CVE-2026-15307) that could allow file writes and potentially remote code execution via spatial lookups accessible to staff users.

2mo ago · hacker-news

GitGuardian researchers identified 321 exposed and still-valid n8n API tokens in public GitHub commits, enabling unauthorized access to sensitive automation workflows, execution data, and stored credentials. Attackers can exploit these tokens to enumerate users, read or exfiltrate data, use or extract stored credentials (e.g., OpenAI API keys), and map high-risk configurations via the audit endpoint—all without exploiting a software vulnerability. The tokens remain valid due to missing expiration dates and poor credential hygiene, with some instances hosted on managed services like n8n.cloud. Responsible disclosure efforts met limited success, highlighting ongoing exposure risks.

2mo ago · hacker-news

A critical vulnerability in Gitea, tracked as CVE-2026-59774, allows unauthenticated attackers to read arbitrary files accessible by the Gitea service account by exploiting the Org-mode markup renderer. The flaw exists in versions 1.22.1 through 1.27.0 and is triggered via a crafted Org-mode #+INCLUDE directive processed by the /{owner}/{repo}/markup endpoint. Although not direct remote code execution, attackers can chain the file-read capability with reading app.ini to extract the INTERNAL_TOKEN and subsequently inject Git hooks to achieve command execution. The vulnerability was discovered by XBOW Security and independently reported by Shai Rod, with no known in-the-wild exploitation observed at the time of disclosure.

2mo ago · hacker-news

A memory corruption vulnerability in the Linux kernel's Open vSwitch (OVS) datapath, tracked as CVE-2026-64531 and dubbed OVSwrap, allows local users to escalate privileges to root. The flaw stems from a 16-bit length field wraparound when processing Netlink attributes in OVS flow installation, which can be triggered without requiring existing OVS bridges or daemons. A public proof-of-concept exploit achieves reliable local privilege escalation by chaining kernel pointer leaks, arbitrary reads, and targeted decrements to modify credentials and gain root access. The exploit supports around 800 kernel builds and leaves behind modified sudoers files and persistent root shells. Default installations of numerous Linux distributions are vulnerable if Open vSwitch is enabled and unprivileged user namespaces are allowed.

2mo ago · hacker-news

A long-standing supply chain attack has affected QuickFox, a VPN and network acceleration tool, since at least August 2025. The malicious Windows installer, starting from version 3.0.51.0, delivers a backdoor called FDMTP via a trojanized Electron-based application. The attack uses a JavaScript loader that fingerprints the victim endpoint and downloads the payload from a malicious domain, cdns3.51quickfox[.]cn, which mimics the legitimate domain. The malware employs DLL side-loading to execute FDMTP, which communicates with a C2 server to exfiltrate system information and download additional plugins, targeting users such as Chinese expatriates and professionals interacting with Chinese speakers.

2mo ago · hacker-news

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation. These include a critical remote code execution flaw in Langflow (CVE-2026-9198), a sensitive data encryption bypass in Apache Tomcat (CVE-2026-34486), and an authentication bypass in N-able N-central (CVE-2026-18556 and CVE-2026-18577). Exploitation of CVE-2026-34486 has been linked to a Chinese-speaking threat actor using the aliases knaithe and KnYuan, who leveraged AI-powered offensive tools like DeepSeek via the Hermes Agent framework to autonomously target internet-exposed systems. The actor combined autonomous reconnaissance with manual exploitation of known vulnerabilities in Citrix NetScaler, Marimo, and IKE VPN, among others, targeting over 460 organizations.

2mo ago · hacker-news

Open VSX removed 77 malicious 'evil twin' extensions that impersonated legitimate developer tools but were designed to exfiltrate sensitive developer environment data. The extensions, uploaded between July 26 and August 1, 2026, sent system information, workspace details, and CI/CD context to the domain mangorbit[.]com. Nineteen of them were more advanced reconnaissance payloads that collected Git metadata, installed extensions, CI environment variables, and telemetry settings. The malware included fallback mechanisms via DNS TXT records and persistence logic to distinguish between human and configuration-driven installations.

2mo ago · hacker-news

Google removed three AI agent workflows from its Agent Development Kit (ADK) Python repository after Pillar Security demonstrated a supply chain attack vector. A malicious GitHub issue could trigger a prompt injection in a triage agent, leading to execution of a privileged code-fixing agent via a trusted bot account. This allowed arbitrary code execution on the CI runner and exfiltration of sensitive credentials, including a bot personal access token (PAT), a Google API key, and a Google Cloud service-account credential. Although no in-the-wild exploitation was observed, the attack chain exploited overly broad permissions and insufficient isolation between automation components.

2mo ago · hacker-news

The Greatness PhaaS (Phishing-as-a-Service) platform has added device code phishing capabilities to bypass Multi-Factor Authentication (MFA) by abusing the OAuth 2.0 Device Authorization Grant. This enables attackers to steal authentication tokens without presenting fake login pages, making detection more difficult. The service supports multiple phishing methods including adversary-in-the-middle (AiTM) attacks, OAuth consent abuse, and phishing for iCloud, Yahoo, and Google Workspace. Post-compromise, attackers use stolen tokens to access Microsoft 365 resources via Microsoft Graph API and establish persistence by registering new devices to obtain Primary Refresh Tokens (PRTs).

2mo ago · hacker-news

cPanel has patched a critical vulnerability, CVE-2026-58048 (CVSS 4.0: 9.4), that allows an authenticated hosting customer to execute SQL commands with full administrative database privileges, effectively crossing the privilege boundary into the server's root database context. The flaw resides in the database-renaming process, where SQL mode is not preserved, leading to execution in root context. This could lead to full operating system compromise depending on configuration. Two additional vulnerabilities were patched in the same release: CVE-2026-58047, an HTTP request-smuggling issue in cpsrvd, and a local privilege escalation in Exim via unsafe string expansion in .forward files.

2mo ago · hacker-news

An active multi-wave campaign dubbed SMOKE#SCREEN by Securonix uses fake Adobe and Zoom update lures, along with business document themes, to deliver Remote Monitoring and Management (RMM) tools like ConnectWise ScreenConnect. The attack begins with spear-phishing emails containing obfuscated VBScript droppers that perform anti-analysis checks before deploying payloads. These payloads ultimately install ScreenConnect, providing attackers with persistent remote access through attacker-controlled relay servers. A separate but related campaign distributes the Powercat Java-based information stealer via fake Xeno Roblox cheat installers, enabling credential theft, surveillance, and remote control.

2mo ago · hacker-news

A malicious npm package worm originating from keyv@6.0.0 has spread to hundreds of packages across multiple organizations, leveraging preinstall scripts to steal developer and CI credentials, including repository, cloud, and private-key material. The payload can propagate by republishing compromised packages using stolen npm credentials and includes secondary execution paths via .claude and .vscode hooks that activate when a user trusts the workspace. The attack leveraged legitimate GitHub Actions workflows, resulting in valid SLSA and OIDC provenance, making detection more difficult. The malware family is linked to prior PyPI compromises and is associated with the Shai-Hulud campaign, though the specific threat actor remains unidentified.

2mo ago · hacker-news

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability, CVE-2026-18577, in N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation. The flaw, stemming from incomplete patching of a prior vulnerability (CVE-2026-18556), enables authentication bypass and account takeover, allowing attackers to gain administrative access and pivot to managed endpoints using the Take Control feature. Indicators include malicious use of legitimate tools like Cloudflared and connections from specific IP addresses associated with Mullvad and NordVPN exit nodes. While no specific threat actor has been attributed, exploitation has been observed across multiple organizations, with attackers conducting reconnaissance, lateral movement, and persistence.

2mo ago · hacker-news

The DOUBLECUP loader-as-a-service (LaaS) is being used by threat actors to deliver malware such as CountLoader and a previously undocumented Python-based remote access trojan (RAT) called DeviceManager. The attack begins with social engineering lures via fake CRM login pages using ClickFix, which trigger the download of steganographically encoded PNG images into the browser cache. These images contain hidden payloads that, when extracted, execute malicious code to deploy the final malware. CountLoader uses environmental keying based on the victim's public IP address for decryption and establishes persistence by modifying browser shortcuts, while DeviceManager leverages blockchain-based C2 resolution via Ethereum/Polygon smart contracts using EtherHiding.

2mo ago · hacker-news

A software supply chain attack has been uncovered involving 18 malicious npm packages that impersonate legitimate Alibaba-scoped packages, targeting Chinese-speaking developers. The packages deliver a cross-platform remote access trojan (RAT) through a multi-stage payload delivery mechanism that uses a rule engine and vm module to execute OS-specific malicious actions. On Windows, it trojanizes enterprise apps like Alilang; on Linux, it runs a memory-resident binary; and on macOS, it installs a persistent background script. The final payload enables command execution, file exfiltration, host reconnaissance, and lateral movement, suggesting industrial espionage as the likely motive.

3mo ago · hacker-news

The INC Ransomware group has become the dominant threat actor exploiting zero-day vulnerabilities in SonicWall SMA 1000 series VPN appliances, specifically CVE-2026-15409 and CVE-2026-15410, which allow for arbitrary command execution. The group has exploited these flaws since at least June 22, 2026, deploying a Python script called KNUCKLEBALL to launch the Suo5 proxy and a custom Java web shell named ORANGETAIL. Victims span multiple countries including the U.S., Australia, and Switzerland, with attackers using social engineering tactics such as phone calls from an individual claiming to be 'Andrew' and using the number +1 (304) 384-0401 to pressure victims into negotiations via info@helprans[.]com.

3mo ago · hacker-news

Unit 42 researchers identified three post-compromise attack paths—Pass-ta-key, Silver Pass-ta-key, and Golden Pass-ta-key—targeting Chrome's Google Password Manager on Windows systems with TPM. These attacks allow malware with local access to hijack passkey-protected accounts by exploiting weaknesses in device key handling, user-verification key re-enrollment, and extraction of the 32-byte Security Domain Secret (SDS) from memory. While no active exploitation in the wild is reported, the techniques enable silent authentication, persistent access, and passkey decryption if an attacker gains initial endpoint access.

3mo ago · hacker-news

Multiple active threats were reported this week, including Russian threat actors exploiting a Microsoft OWA XSS vulnerability (CVE-2026-42897) to deploy a JavaScript-based implant called OWAReaper for persistent mailbox access. A critical Ruby on Rails vulnerability (CVE-2026-66066) allows unauthenticated attackers to read arbitrary files via crafted image uploads, potentially leading to remote code execution. Additionally, Iranian-linked actors are suspected in coordinated attacks on over 30 Minnesota water systems, where exposed PLCs were targeted to disrupt operations. Storm-2945 (APT29) conducted DNS hijacking via compromised Wi-Fi networks to deliver CornFlake malware and ChocoShell infostealer, while a malicious campaign in RubyGems distributed 199 trojanized packages embedding XMRig cryptojacking payloads.

3mo ago · hacker-news

Thermo Fisher Scientific has patched a high-severity vulnerability, CVE-2026-17583, in its Applied Biosystems human identification software that could allow tampering with DNA analysis files (.fsa and .hid) without detection. The flaw affects five supported product lines, enabling unauthorized modification of data files before analysis if laboratory controls are bypassed. Digital signatures have been added in updated versions to verify file integrity, though no exploitation has been reported to date. Three older product lines are end-of-life and will not receive patches.

3mo ago · hacker-news

The Police National Legal Database (PNLD) suffered a data breach that exposed personal and contact information of police officers, government personnel, and criminal justice professionals. The compromised data, including names and work email addresses, was published on the dark web by a group calling itself ExfilSquad. The breach may have stemmed from misconfigured Microsoft Power Pages with anonymous access enabled, allowing unauthenticated access to Dataverse tables. While no evidence of password compromise or malware use was found, the exposed data could facilitate targeted phishing attacks.

3mo ago · hacker-news

A Chinese threat actor is leveraging a publicly leaked version of the DarkSword exploit kit to target iOS devices running versions 18.4 through 18.7. The campaign uses fake AWS and Apple ID sign-in pages as watering holes to deliver the GHOSTBLADE information-stealing malware, which exfiltrates keychain, iCloud, and Wi-Fi credentials. The attacker infrastructure includes multiple malicious panels such as 'DarkSword Admin,' 'Decode Dashboard,' and 'C2 Control Panel,' with several IP addresses hosting these interfaces and a Telegram contact link recovered from one panel.

3mo ago · hacker-news

Three high-severity vulnerabilities in Hugging Face's Diffusers library, collectively named FaceHugger, allow attackers to bypass the trust_remote_code safeguard and execute arbitrary code when loading models from untrusted repositories. The flaws stem from TOCTOU race conditions and improper validation during model loading, enabling malicious model repositories to silently run code during pipeline initialization. These vulnerabilities affect systems that use DiffusionPipeline.from_pretrained with untrusted or remote custom pipelines, posing significant AI supply chain risks.

3mo ago · hacker-news

Attackers exploited an authentication bypass vulnerability (CVE-2026-18577) in N-able's N-central remote monitoring and management platform to gain remote administrative access to customer servers. The initial fix for CVE-2026-18556 was incomplete, allowing attackers to exploit an alternate path, later tracked as CVE-2026-18577, affecting N-central builds prior to 2026.3.1.7. After compromising N-central servers, attackers used Take Control for lateral movement and deployed Cloudflare tunnels as persistent services on managed endpoints, enabling remote access without inbound firewall rules. N-able identified six malicious IP addresses used in the attacks, and Huntress observed exploitation at one partner account, leading to access across nine downstream organizations. Post-compromise activity included process enumeration, but no data exfiltration was confirmed. Customers are advised to upgrade to build 2026.3.1.7 and hunt for malicious indicators such as suspicious svchost.exe instances and Cloudflared services.

3mo ago · hacker-news

A critical firmware flaw in Coldcard hardware wallets, stemming from a 2021 integration error, led to the theft of approximately $70.2 million in Bitcoin (1,082.65 BTC) from 1,196 addresses within 41 minutes on July 30, 2026. The vulnerability arose because seed generation used a deterministic software pseudorandom number generator (PRNG) instead of the intended hardware RNG, reducing effective entropy to as low as 40 bits. Coinkite released emergency firmware updates, but existing compromised seeds remain vulnerable unless regenerated on patched firmware. The attack exploited predictable BIP-39 seed generation, allowing offline reconstruction of candidate seeds by correlating device UID, timer state, and RNG call history with public blockchain data.

3mo ago · hacker-news

A threat actor dubbed Storm-2945, assessed to be a sub-cluster of the Russian state-sponsored group APT29 (aka Cozy Bear), has hijacked hotel Wi-Fi networks to deliver a surveillance-focused remote access trojan named CornFlake. The attack abuses compromised captive portals to redirect users to fake browser or OS update prompts, which lead to the download of malicious payloads. The CornFlake malware, written in Go, establishes persistence via registry run keys and scheduled tasks, captures keystrokes, screenshots, microphone audio, and browser credentials, and can bypass Chrome's App-Bound Encryption. A related in-memory PowerShell stealer, ChocoShell, harvests Microsoft 365, Azure AD, and WAM tokens from the Token Broker cache. Attackers also leveraged Microsoft's device code authentication flow to gain MFA-satisfied access by tricking users into approving malicious sessions.

3mo ago · hacker-news

Adobe has patched a critical vulnerability, CVE-2026-48449, in its Campaign Classic (ACC) platform with a CVSS score of 10.0, stemming from incorrect authorization that allows arbitrary code execution without user interaction. Another high-severity flaw, CVE-2026-48448, involving SQL injection leading to arbitrary file reads, was also addressed. The updates apply to ACC v7: 7.4.3 build 9398 for Windows and Linux, with no known in-the-wild exploitation reported.

3mo ago · hacker-news

Attackers compromised a JavaScript file, trackpoint-async.js, served by advertising company Adform, using it to conduct a supply chain attack that modified cryptocurrency wallet addresses in real time on affected websites. The malicious script, active at least on July 27, 2026, monitored and altered clipboard content and form inputs to replace legitimate Bitcoin, Ethereum, and Tron wallet addresses with attacker-controlled ones. The script also attempted to exfiltrate the hostname and path of visited pages to a remote server. The attack did not install persistent malware but operated entirely in-browser while the infected page was open, making detection and attribution more difficult.