Tag: supply chain
1740 articles
Hackers Exploit npm Mirrors to Host Phishing Pages
Hackers are exploiting npm mirrors to host phishing pages by uploading malicious HTML files to the npm registry, which are then mirrored and can be accessed directly in a browser. This clever tactic turns the trusted registry into a free web host for malware, allowing threat actors to spread phishing pages under the guise of legitimate content.
AnonyMousKIT Phishing Service Exploits Voice AI to Harvest iPhone Passcodes
Meet AnonyMousKIT, a sneaky phishing service that's exploiting voice AI to trick iPhone users into spilling their passcodes, fueling a massive operation with over 500 domains and 168 reseller brands. This clever scam uses stolen device info to craft convincing emails and texts that help crooks unlock stolen Apple devices.
Navy Launches Office to Bolster Defense Industrial Base
The Navy has launched a new Office of the Defense Industrial Base, led by Andrew Magliochetti, to supercharge its manufacturing ecosystem, safeguard supply chains, and inject cutting-edge commercial tech into its operations. This bold move aims to turbocharge the Navy-Marine Corps team's lethality and competitiveness.
US Government Cyber Experts Warn of AI-Driven Security Challenges
The US Coast Guard faces a daunting task in keeping its vast network secure, with 1,500 global locations - including remote sites in Alaska and Maine that are only accessible by snowmobile - making routine maintenance and patching a logistical nightmare. This dispersed footprint poses significant cyber security challenges, especially when combined with environmental constraints.
NVIDIA NemoClaw Exposes AI Models to Poisoning via Webpage
NVIDIA's NemoClaw exposes AI models to poisoning via webpage, allowing attackers to take control of the model server by binding it to every network interface. This configuration vulnerability makes it easy for hackers to access and manipulate the Ollama API from outside the loopback address.
Recruiter Scams Target Corporate Credentials on Mobile Devices
Beware of recruiter scams targeting your corporate credentials on mobile devices! A recent discovery by Zimperium uncovered a sneaky phishing campaign impersonating top employers and recruiters, including Amazon, Apple, and Louis Vuitton, to steal sensitive info.
npm Packages Host Fake Cloudflare CAPTCHA Pages via Unpkg Mirrors
Researchers uncovered a sneaky scam where attackers hide a fake Cloudflare CAPTCHA page inside harmless-looking npm packages, using mirrors to trick victims into revealing sensitive info. This clever tactic relies on exploiting trusted domains to deploy a ClickFix-style scam that redirects users to attacker-controlled infrastructure.
Australian Cyber Agency Warns of Widespread TeamCity Server Exploit
A critical TeamCity server flaw, tracked as CVE 2026-63077, is being actively exploited, allowing unauthenticated attackers to bypass security checks and execute malicious commands, posing significant risks to organizations. This vulnerability, with a near-perfect CVSS score of 9.8, is a high-priority threat that demands immediate attention.
CISA Mandates Swift Patching for Oracle Flaw
Don't wait - patch now! A critical Oracle flaw, scored 10.0, requires immediate attention to prevent low-complexity attacks that could give hackers complete access to your critical data.
WeedHack Malware Persists, Adapts After Infrastructure Takedown
Even after its infrastructure was taken down, the sneaky WeedHack malware managed to adapt and persist, continuing to infect Minecraft players with its malicious code. McAfee researchers tracked over 6,300 attempts to access the malware in August, showing its resilience as a malware-as-a-service operation.
US Targets Mabna Institute Hackers with Sanctions Over Iranian Cyber-Attacks
The US has imposed sanctions on 17 alleged Mabna Institute hackers responsible for a massive cyber-attack spree targeting over 300 universities, 50 private companies, and several government agencies since 2013. This crackdown, dubbed Operation Economic Outcast, aims to cut off the financial lifelines sustaining Iran's cybercrime operations.
ReliaQuest Exposes ShinyHunters' Social Engineering Tactics
ReliaQuest sets the record straight: claims of a ransomware attack or breach are completely false. The company recently thwarted a social engineering scheme by ShinyHunters, swiftly investigating and publicly rebutting the misinformation.
Attackers Exploit miniOrange SAML Flaws to Hijack WordPress Admin Access
A critical vulnerability in the Xecurify miniOrange SAML 2.0 Single Sign On plugin for WordPress allows hackers to hijack admin access with just a few clicks, giving them the keys to your site's kingdom. This flaw lets unauthenticated attackers log in as any existing user, including administrators, by exploiting a weakness in signature verification.
Mac Malware Exploits Fake OpenAI Codex Ads
Beware of fake OpenAI Codex ads: hackers are using Google search results to trick Mac users into downloading malware by pasting a malicious Terminal command. This sneaky tactic unleashes a multi-stage malware infection, putting your device at risk.
CISA Warns of Actively Exploited Oracle WebLogic Flaw
A critical Oracle WebLogic flaw, CVE-2026-21962, is being actively exploited, allowing hackers to wreak havoc on your system by creating, deleting, or modifying sensitive data. This severe vulnerability has a CVSS score of 10.0, making it a high-priority threat that demands immediate attention.
Senate Bill Targets Energy Sector's Quantum Cybersecurity Gaps
The clock is ticking: as quantum technology advances, our critical energy systems are vulnerable to devastating cyberattacks - that's why Sen. Chris Coons is pushing for the Quantum-GUARD Act to safeguard our nation's infrastructure. This crucial bill would empower the Federal Regulatory Energy Commission to proactively defend against quantum-enabled threats.
Malware Spreads via Fake Minecraft Clients Using SEO Poisoning
Malware is sneaking its way into gamers' computers through fake Minecraft clients, using clever tricks like search engine manipulation and spreading malicious links on popular platforms like Discord and YouTube. Over 6,300 attempts to access these malicious sites have already been blocked by McAfee Labs.
Iran-linked hackers disrupt UK power plant operations
A recent cyberattack linked to Iran caused a small UK power plant to shut down, but fortunately, the incident was contained and posed no risk to the broader energy system. The UK government assured that the country's energy infrastructure is highly resilient and that they're working closely with the sector to protect it.
CMMC Pause Doesn't Halt Compliance Imperative
The pause on CMMC Phase 2.0 doesn't let you off the compliance hook - you still need to prioritize protecting controlled unclassified information (CUI) within your environment. Keep moving forward with necessary security measures to ensure CUI protection, as requirements remain in place despite validation delays.
Google Sites Abused to Deliver macOS Malware via Fake Codex Download
Malicious actors are tricking users into downloading macOS malware by hijacking Google searches for "Codex macOS download" and using fake Google Sites pages that mimic the real OpenAI Codex download portal. These convincing sites offer both macOS and Linux downloads, but only deliver a Mach-O payload to unsuspecting macOS users.
ReliaQuest Foils ShinyHunters' Data-Theft Attack via Social Engineering
ReliaQuest swiftly foiled a sneaky social engineering attack by ShinyHunters, who tried to trick employees into spilling sensitive info, but thankfully, only had view-only access and didn't touch customer data. The company's quick response contained the threat, protecting its systems and customers from harm.
AI Coding Tools Exacerbate Open-Source Remediation Debt
AI coding tools are speeding up development, but at a hidden cost: they can quickly introduce a flood of new open-source components that security teams struggle to keep up with, multiplying remediation debt. This creates a downstream cycle of vulnerability assessments, licensing checks, and ownership questions that can be overwhelming.
Password Books Make Comeback as Low-Tech Security Option
In a world where digital security breaches are on the rise, a simple, low-tech solution is making a surprising comeback: password books, now available for just AU$4.90 at AusPost branches in Australia. These compact books offer a practical, old-school way to store your credentials - but do they offer a secure solution?
Iranian Hackers Expose UK Power Plant Vulnerability
Can a UK power plant vulnerability leave millions in the dark? Iranian hackers recently caused a four-day blackout at an unnamed UK facility, raising concerns about the potential for a larger, more critical attack.