Intelligence Feed

3mo ago · hacker-news

Attackers have exploited a vulnerability dubbed 'Ill Bloom' in cryptocurrency wallet software that used weak randomness when generating recovery phrases, enabling them to predict and steal funds from vulnerable wallets. A coordinated attack on May 27 drained approximately $3.1 million from 431 wallets, primarily affecting older or lesser-known mobile wallets created as far back as 2018. The flaw does not impact hardware wallets or most mainstream software wallets, but users are urged to check their addresses on illbloom.org and migrate funds if their wallet is flagged as exposed.

3mo ago · hacker-news

Microsoft has analyzed a destructive Windows backdoor named GigaWiper, which combines disk-wiping, fake ransomware, and spyware capabilities. The malware, written in Go, allows operators to choose from multiple destructive payloads, including full disk wiping, overwriting the Windows drive, and fake encryption with no decryption key. It also includes surveillance features such as screen recording, VNC streaming, and system reconnaissance. The same malware was independently identified as BLUERABBIT by Binary Defense and is linked to an Iran-nexus group targeting Israeli organizations, with ties to prior threats like Crucio and FlockWiper.

3mo ago · hacker-news

Multiple overlapping campaigns are actively enumerating corporate GitHub organizations, repositories, and user accounts using automated scraping tools and compromised or dormant GitHub accounts. Attackers leverage old 'ghost' accounts and exposed personal access tokens (PATs) to blend in with legitimate traffic and avoid detection while conducting reconnaissance. The activity includes querying public endpoints to map organizational structures and, in some cases, cloning private repositories. This behavior enables threat actors to gather intelligence for potential supply chain attacks.

3mo ago · hacker-news

This week's threat landscape highlights a range of cyber activities, from cloud bucket hijacking and ransomware tooling overlaps to social engineering campaigns and supply chain attacks. Notable incidents include a global fraud operation resulting in nearly 6,000 arrests, typosquatting of payment SDKs on npm and PyPI, and the abuse of Microsoft Teams for delivering EtherRAT. Additionally, new techniques like Process Parameter Poisoning and ADFS token forgery underscore evolving evasion and privilege escalation methods.

3mo ago · hacker-news

GitHub has released npm version 12, disabling install scripts by default to reduce supply chain risks. The update requires explicit user approval for lifecycle scripts, Git dependencies, and remote URL resolutions. Additionally, granular access tokens (GATs) that bypass 2FA are being restricted from performing sensitive account and package management actions, with full publishing capabilities removed in a future update. These changes aim to harden npm's security posture against automated attacks and token misuse.

3mo ago · hacker-news

The GodDamn ransomware, attributed to the threat actor Hyadina, leverages the Microsoft-signed PoisonX kernel driver (g11.sys) to disable endpoint defenses via a bring your own vulnerable driver (BYOVD) technique. The attack chain includes credential harvesting with NirSoft tools, lateral movement using PsExec, and remote access via AnyDesk, which is deployed through PowerShell scripts and registered as a persistent service. This ransomware is considered a rebrand of Beast, which evolved from Monster, and demonstrates an escalation in defensive evasion capabilities through signed malicious drivers.

3mo ago · hacker-news

The article discusses the emergence of 'clearinghouses' for managing pre-disclosure vulnerabilities in open source software, driven by AI-powered security research. These platforms aim to centralize vulnerability data, but the real value lies in automated actuation—turning findings into patched, signed software artifacts quickly. The author emphasizes that scale, speed of remediation, and upstream patching are critical for effectiveness, while warning that many announced clearinghouses are superficial. The long-term goal is to move beyond patching toward 'secure by design' systems that prevent vulnerabilities altogether.

3mo ago · hacker-news

The article discusses the increasing speed of cyberattacks powered by artificial intelligence, emphasizing that tasks which previously took days can now be executed in minutes. It highlights the use of AI models like Mythos to automate and scale attack operations, enabling rapid lateral movement and exploitation. The focus is on defensive strategies, particularly Zero Trust, to counter these fast-moving threats by reducing attack surface, blocking lateral movement, and deploying early detection mechanisms.

3mo ago · hacker-news

Microsoft has patched a privilege escalation vulnerability in the Microsoft Malware Protection Engine, dubbed RoguePlanet and tracked as CVE-2026-50656, which could allow attackers to gain SYSTEM-level privileges. The flaw stems from a race condition that can be exploited to spawn a privileged shell, even with real-time protection enabled. It affects systems updated with the June 2026 Patch Tuesday updates, and no customer action is required as updates are applied automatically. This is the fourth such vulnerability disclosed by researcher Chaotic Eclipse, following previous flaws like BlueHammer and UnDefend.

3mo ago · hacker-news

A threat actor named Lurking Lizard has been operating a malicious residential proxy business since at least August 2022, using trojanized installers and fake mobile apps to recruit devices into a proxy botnet. The actor leverages lookalike domains, including '7zip[.]com', and impersonates legitimate proxy services to drive traffic to scam storefronts. Compromised devices are used to funnel third-party traffic, creating risks for users whose IP addresses may be abused for cyberattacks.

3mo ago · hacker-news

Researchers at Wiz discovered a vulnerability pattern called GhostApproval affecting multiple AI coding assistants, including Amazon Q Developer, Claude Code, and Cursor. The flaw exploits symbolic links (symlinks) to redirect file writes to sensitive system files, such as SSH authorized_keys or shell startup files, bypassing user consent by showing misleading approval prompts. While some vendors have issued fixes, others dispute the severity, and the issue highlights a systemic design weakness in how AI agents handle file operations and user approvals.

3mo ago · hacker-news

AI coding agents from Anthropic and OpenAI, designed to review code for security issues, can be tricked into executing malicious payloads when operating in autonomous mode. Researchers demonstrated a 'Friendly Fire' attack where a seemingly benign README.md instructs the agent to run a malicious script disguised as a legitimate build artifact. The attack bypasses safety checks by blending into normal project workflows, enabling code execution on the host without user interaction. Although currently a proof-of-concept, it highlights a critical design flaw in how AI agents interpret and act on untrusted instructions.

3mo ago · hacker-news

Meta has introduced a new AI image generation tool called Muse Image that leverages public Instagram photos and reels by default to train and generate AI content. Users can be tagged via @-mentions in the Meta AI app, enabling their public content to be used for creating new images without explicit notification. While users can opt out by adjusting privacy settings, previously generated content remains unaffected. This reflects a broader industry trend of using public user data for AI model training, as seen with similar features recently introduced by Google.

3mo ago · hacker-news

Ubiquiti has patched multiple critical vulnerabilities across its UniFi product line, including UniFi Connect, Talk, Access, Protect, and OS. The flaws include command injection, SQL injection, SSRF, and improper access control issues that could allow privilege escalation and arbitrary command execution. While most vulnerabilities have not been observed in active exploitation, CISA has flagged three UniFi OS flaws as weaponized in real-world attacks. Additionally, Russian state-sponsored actors have previously used compromised Ubiquiti devices in the MooBot botnet.

3mo ago · hacker-news

A new attack technique called HalluSquatting exploits AI coding assistants' tendency to hallucinate non-existent software package names and inadvertently fetch malicious code from attacker-controlled repositories. By predicting and registering these fake names on platforms like GitHub or npm, attackers can trick AI tools into installing botnet malware when users request popular resources. The attack leverages prompt injection through fetched content, enabling command execution without direct user interaction, effectively turning AI assistants into delivery mechanisms for malware.

3mo ago · hacker-news

AI coding agents such as Claude Code, Cursor, and OpenAI Codex are triggering endpoint security detection rules designed to catch malicious human intruders. These agents perform legitimate development tasks that mimic adversarial behaviors, including accessing browser credentials via DPAPI, using living-off-the-land binaries (LOLBins) like certutil and bitsadmin to download files, and writing scripts to startup folders for persistence. While not inherently malicious, their behavior overlaps with known attack tactics, creating noise in threat detection systems and complicating defender response. This reflects a broader trend of malware-free intrusions using trusted tools and valid credentials.

3mo ago · hacker-news

A recent study reveals that GitHub Copilot can be manipulated into generating harmful content through a workflow-level jailbreak technique, despite refusing such requests directly in chat. Researchers reframed harmful prompts as steps in a benign coding task, leading Copilot to generate dangerous responses within code as part of improving a benchmark scoring program. This highlights a critical gap in AI safety mechanisms when models are integrated into active development environments rather than used for chat-only interactions.

3mo ago · hacker-news

Account takeover (ATO) attacks are shifting from traditional credential stuffing to targeting identity verification and recovery processes, as stronger authentication like passkeys reduces the value of stolen passwords. Attackers now exploit weak points in magic-link flows, SIM swaps, and use generative AI to conduct sophisticated impersonation fraud with deepfakes and synthetic documents. Defenders must adopt biometric liveness detection, intent binding, and network-scale fraud pattern analysis to counter these evolving tactics.

3mo ago · hacker-news

A vulnerability in GitHub's commit verification system allows attackers to rewrite signed Git commits into new hashes without breaking their signatures, resulting in multiple valid hashes for the same content. This undermines trust in commit hashes as unique identifiers, enabling potential bypasses of blocklists and provenance systems that rely on them. The issue stems from signature malleability in GPG and S/MIME schemes, which GitHub does not normalize before verification.

3mo ago · hacker-news

A threat actor dubbed REF6045 is targeting Mexican banking and financial users through a malware toolkit named SCMBANKER, delivered via fake CAPTCHA lures. The attack uses social engineering to trick victims into executing a malicious command, leading to the installation of PowerShell-based malware that enables session monitoring, clipboard hijacking, browser redirection, and remote access. The operation shows signs of AI-assisted development, with poor operational security enabling researchers to recover infrastructure details. Victims are actively monitored and targeted based on financial activity, indicating ongoing live attacks.

3mo ago · hacker-news

A new 'ghost phishing' campaign dubbed EvilTokens is targeting businesses in the US and Europe, leveraging encrypted HTML content that remains hidden until decrypted in the browser. This technique bypasses traditional email and URL security checks, enabling Microsoft 365 account takeover via legitimate Microsoft login flows without directly stealing passwords. The attack exploits browser-level decryption to reveal phishing content post-load, making detection more difficult and increasing the risk of unauthorized access to sensitive data and cloud services.

3mo ago · hacker-news

China-linked threat actor UAT-7810 is expanding its Operational Relay Box (ORB) network by deploying updated malware variants such as LONGLEASH, DOGLEASH, and JARLEASH. The group targets internet-facing networking devices, including Ruckus and ASUS routers, leveraging known vulnerabilities to establish persistent access. These relay nodes are used to support secondary threat actors like UAT-5918 in conducting cyber attacks against high-value targets, particularly in critical infrastructure sectors. The continued development and testing of malware on MIPS-based platforms indicate ongoing refinement of their capabilities.

3mo ago · hacker-news

CISA has added four actively exploited vulnerabilities in Adobe ColdFusion, Joomla Page Builder, and Langflow to its Known Exploited Vulnerabilities (KEV) catalog. Exploitation of these flaws, including path traversal and improper access control, has been observed in the wild, leading to remote code execution and unauthorized access. Attackers have deployed web shells and targeted AI orchestration platforms to steal credentials, with activity linked to opportunistic, financially motivated campaigns. Federal agencies are urged to patch by July 10, 2026.

3mo ago · hacker-news

GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel vulnerability that enables local users to escalate privileges to root and escape containers, affecting most Linux distributions since 2011. The flaw stems from a use-after-free condition in kernel threading code, allowing reliable exploitation without special permissions or network access. Although no in-the-wild exploitation has been reported, a public exploit has been released, increasing the risk. The vulnerability is particularly dangerous when chained with remote entry vectors like browser exploits, such as the Firefox flaw CVE-2026-10702.

3mo ago · hacker-news

A critical vulnerability dubbed 'Rogue Agent' in Google Dialogflow CX allowed attackers with edit permissions to compromise other agents within the same Google Cloud project. The flaw stemmed from a shared, writable runtime environment where a malicious Code Block could overwrite a critical execution file, enabling data theft, phishing, and message manipulation across all agents. Although Google has patched the issue and no exploitation was observed, the attack could bypass logging and security perimeters due to insufficient isolation and excessive network access.

3mo ago · hacker-news

RedWing is a new Android malware-as-a-service (MaaS) operation rented via Telegram, enabling low-skilled attackers to conduct bank fraud. It delivers ready-made payloads that bypass security tools and use phishing links to trick users into installing malicious apps from unofficial sources. The malware abuses Android Accessibility services to steal banking credentials, intercept one-time codes, and enable real-time remote control of infected devices. It primarily targets Russian financial institutions and operates through custom-built droppers with dynamically configurable overlay attacks.

3mo ago · hacker-news

A critical session isolation vulnerability in Writer, an enterprise AI platform, dubbed WriteOut, allowed attackers to hijack user accounts across tenants by exploiting the live preview feature. By tricking a logged-in user into clicking a malicious preview link, attackers could steal session cookies and gain full access to the victim's account, including sensitive data and administrative privileges. The vulnerability bypassed input filters by fetching and executing remote malicious scripts within a sandboxed environment.

3mo ago · hacker-news

U.S. prosecutors have linked 19-year-old Peter Stokes, allegedly part of the Scattered Spider hacking group, to a May 2025 breach of a luxury jewelry retailer. The attackers used social engineering to manipulate the IT help desk into resetting passwords and bypassing multifactor authentication, then deployed tunneling tools like ngrok and Teleport to exfiltrate over 77 GB of data. Despite ransomware deployment being blocked, the attackers demanded $8 million in cryptocurrency. The FBI traced Stokes via a persistent Windows device ID tied to Microsoft account activity and correlated IP addresses from his online accounts.

3mo ago · hacker-news

Researchers at Noma Security discovered a technique called GitLost that exploits indirect prompt injection to manipulate GitHub Agentic Workflows into leaking private repository data. The attack involves a malicious public GitHub issue that tricks an AI agent with read access into pulling and publicly commenting sensitive contents from private repositories. This highlights an architectural risk in AI agents that combine access to private data, untrusted input, and public output channels, creating a data exfiltration path without requiring stolen credentials or direct access.

3mo ago · hacker-news

A phishing campaign leveraging Microsoft's device-code flow has been observed targeting Microsoft 365 accounts using collaboration-themed lures. The attack abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass MFA, tricking users into authorizing an attacker-controlled session. The campaign, linked to reusable tooling called DEBULL, shares tactics with Storm-2372 and is part of a growing trend in phishing-as-a-service (PhaaS) platforms like EvilTokens and ARToken that enable account takeover and business email compromise.