brangberg – Page 191

Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens

Cybersecurity researchers have disclosed details of a new malicious package on the npm repository that works as a fully functional WhatsApp API, but also contains the ability to intercept every message and link the attacker’s device to a victim’s WhatsApp account.
The package, named “lotusbail,” has been downloaded over 56,000 times since it was first uploaded to the registry by a user named “

Malicious npm package steals WhatsApp accounts and messages

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal WhatsApp messages, collect contacts, and gain access to the account. […]

Romanian water authority hit by ransomware attack over weekend

Romanian Waters (Administrația Națională Apele Române), the country’s water management authority, was hit by a ransomware attack over the weekend. […]

Rising Tides: When Cybersecurity Becomes Personal – Inside the Work of an OSINT Investigator

Shannon Miller shares her approach to creating domestic safety and a call to the cyber community to help reduce harm.

The post Rising Tides: When Cybersecurity Becomes Personal – Inside the Work of an OSINT Investigator appeared first on SecurityWeek.

University of Phoenix data breach impacts nearly 3.5 million individuals

The Clop ransomware gang has stolen the data of nearly 3.5 million University of Phoenix (UoPX) students, staff, and suppliers after breaching the university’s network in August. […]

Coupang breach affecting 33.7 million users raises data protection questions

Coupang disclosed a data breach affecting 33.7 million customers after unauthorized access to personal data went undetected for nearly five months. Penta Security explains how the incident highlights insider credential abuse risks and why encrypting customer data beyond legal requirements can reduce exposure and limit damage. […]

54 Charged in US Over ATM Attacks Involving ‘Ploutus’ Malware

The suspects are leaders and members of the Venezuelan crime syndicate Tren de Aragua.

The post 54 Charged in US Over ATM Attacks Involving ‘Ploutus’ Malware appeared first on SecurityWeek.

MacSync macOS Malware Distributed via Signed Swift Application

A recent MacSync Stealer version no longer requires users to directly interact with the terminal for execution.

The post MacSync macOS Malware Distributed via Signed Swift Application appeared first on SecurityWeek.

Gambit Cyber Raises $3.4 Million in Seed Funding

The cybersecurity startup will use the funds to accelerate platform improvements, global expansion, and partnerships.

The post Gambit Cyber Raises $3.4 Million in Seed Funding appeared first on SecurityWeek.

⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & More

Cyber threats last week showed how attackers no longer need big hacks to cause big damage. They’re going after the everyday tools we trust most — firewalls, browser add-ons, and even smart TVs — turning small cracks into serious breaches.
The real danger now isn’t just one major attack, but hundreds of quiet ones using the software and devices already inside our networks. Each trusted system can

Author: brangberg