Ken Underhill

A new Rust-based ransomware called 01flip is targeting both Windows and Linux systems in coordinated attacks on critical infrastructure.

Fake ChatGPT support sessions are being used to trick macOS users into installing the AMOS infostealer via malicious terminal commands.

A Jenkins denial-of-service vulnerability allows attackers to freeze CI/CD pipelines and disrupt build operations.

GitLab patched critical flaws that could enable XSS, denial-of-service attacks, and authentication bypasses.

Cisco-trained hackers led a nation-state espionage campaign against global telecom networks.

Spiderman lets attackers clone European banks in seconds and steal credentials in real time.

Over 644,000 domains are exposed to a critical React flaw now under active exploitation.

A newly disclosed PowerShell flaw allows local code execution.

A Traefik misconfiguration disabled TLS checks across Kubernetes clusters.

Flare found over 10,000 Docker Hub images leaking sensitive credentials.

Over 40,000 SharePoint- and DocuSign-themed phishing emails reveal the rising threat of cloud impersonation attacks.

APT28’s new “LameHug” malware uses LLMs to generate basic commands, a strikingly clumsy move from an otherwise advanced threat group.