ShinyHunters Breach Exposes 600K 7-Eleven Records
7-Eleven confirms data breach after ShinyHunters claims theft of 600K+ Salesforce records. Franchisee data and corporate info exposed in latest attack.
Read More
Critical Check Point VPN Zero-Day Exploited In Wild
A critical zero-day vulnerability (CVE-2024-50751) in Check Point VPN gateways is being actively exploited in the wild, allowing unauthenticated remote attackers to execute arbitrary code. The flaw affects multiple Check Point products including CloudGuard Network, Quantum Maestro, Quantum Scalable
Meta Expands Data Use Beyond Ads To Feed And AI
Meta has updated its data usage policies to explicitly permit the use of off-site business interactions—data collected from third-party websites and apps—to personalize Facebook and Instagram feeds and train its AI systems. Previously limited primarily to advertising purposes, this expansion signifi
SimpleHelp Bug Lets Hackers Create Rogue Admin Accounts
A critical vulnerability in SimpleHelp remote support software allows unauthenticated attackers to create rogue administrator accounts, potentially granting complete control over remote support infrastructure. The flaw affects versions prior to 5.5.6 and has been assigned CVE-2024-57726 with a CVSS
Linux Cryptomining Campaign Abuses PAM for XMRig Evasion
Threat actors are exploiting Linux Pluggable Authentication Modules (PAM) to deploy and conceal XMRig cryptocurrency miners on compromised systems. This sophisticated campaign uses modified PAM libraries to establish persistence, evade detection, and maintain unauthorized cryptomining operations. Th
Apple Resists UK Encryption Backdoor Demands for iCloud
Apple is once again locked in a high-stakes battle with UK authorities over encryption backdoors, specifically regarding access to iCloud data. The UK government is pressuring Apple to create mechanisms that would allow law enforcement to bypass end-to-end encryption protections on iCloud services.
LiteLLM Flaw Actively Exploited, Chains To RCE
A critical vulnerability in LiteLLM (CVE-2026-42271) is being actively exploited in the wild, allowing attackers to chain multiple flaws and achieve unauthenticated remote code execution. The flaw affects LiteLLM’s proxy server component and can be exploited without authentication, making it a sever
VLC Media Player Abused To Deploy ValleyRAT
Threat actors are abusing the legitimate VLC Media Player executable to sideload malicious DLL files and deploy ValleyRAT, a sophisticated remote access trojan. By exploiting DLL search order hijacking, attackers use a genuine VLC component (vlc.exe) alongside a weaponized libvlc.dll to establish pe
Weekly Malware Roundup: JDownloader Hack & TrickMo Threat
JDownloader site compromised to distribute Python RAT. New TrickMo variant targets banking apps. Mr_Rot13 exploits CVE for backdoor access. Weekly malware roundup.
Nicegram, eSIM Plus Hide Russian, Belarus Infrastructure
Security researchers have discovered that popular mobile applications eSIM Plus and Nicegram share significant portions of codebase with infrastructure ties to Belarus and Russia. The analysis reveals common backend servers, API endpoints, and development patterns suggesting a coordinated operation