Category: SecurityWeek

Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files.

The post ‘Arkanix Stealer’ Malware Disappears Shortly After Debut appeared first on SecurityWeek.

Broadcom has patched several vulnerabilities in VMware Aria Operations, including high-severity flaws.

The post VMware Aria Operations Vulnerability Could Allow Remote Code Execution appeared first on SecurityWeek.

Timothy Youngblood was CISO at Dell, CISO at Kimberley-Clark, VP & CISO at McDonald’s, and SVP, CSO & Product Security Officer at T-Mobile.

The post CISO Conversations: Timothy Youngblood; 4x Fortune 500 CISO/CSO appeared first on SecurityWeek.

The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch.

The post New ‘Sandworm_Mode’ Supply Chain Attack Hits NPM appeared first on SecurityWeek.

Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue.

The post GitHub Issues Abused in Copilot Attack Leading to Repository Takeover appeared first on SecurityWeek.

The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.

The post Taiwan Security Firm Confirms Flaw Flagged by CISA Likely Exploited by Chinese APTs appeared first on SecurityWeek.

The group’s administrator and moderator were arrested last year, and two other members were arrested this month.

The post Anonymous Fénix Members Arrested in Spain appeared first on SecurityWeek.

The Everest ransomware group has taken credit for a hacker attack on Vikor Scientific, now called Vanta Diagnostics.

The post US Healthcare Diagnostic Firm Says 140,000 Affected by Data Breach appeared first on SecurityWeek.

Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms.

The post Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud appeared first on SecurityWeek.

While this campaign targets crypto wallets and steals money, the methodology has far wider potential that could be used by other attackers. 

The post Autonomous AI Agents Provide New Class of Supply Chain Attack appeared first on SecurityWeek.