UNK_MassTraction Exploits Roundcube Flaws Against US, Canadian Universities

China-linked UNK_MassTraction targets US and Canadian universities through Roundcube flaws, stealing sessions and opening access to research mail servers.

·

Canada, China, Cyber Attack, Cyber Crime, cybersecurity, Phishing Scam, Privacy, Roundcube, Security, University, UNK_MassTraction, USA, vulnerability

¶¶¶¶¶

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

Noma Labs details GitLost, a prompt injection flaw that made GitHub’s AI agent expose private repo data through a crafted public issue and guardrail failures.

·

Agentic AI, cybersecurity, GitHub, GitHub Actions, GitLost, Privacy, Repository, Security, vulnerability

¶¶¶¶¶

4 Best Email Security Solutions to Keep Employee Inboxes Safe

Compare leading and best email security solutions with AI threat detection, phishing defense, malware blocking, and DLP features for teams.

·

AI, Business, cybersecurity, Email Security, emails, Privacy, Security

¶¶¶¶¶

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware.

·

ClickFix, Cloudflare, Cyber Attack, cybersecurity, Google, Malware, Scams and Fraud, Security

¶¶¶¶¶

New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App

The newly spotted PamStealer is spreading through a fake Maccy clipboard app and steal Mac passwords, browser data and clipboard content.

·

Apple, Clipboard, Infostealer, Maccy, macOS, Malware, PamStealer, Security

¶¶¶¶¶

FortiBleed Credential Theft Connected to INC and Lynx Ransomware

FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerability also under investigation.

·

Cyber Crime, cybersecurity, FortiBleed, FortiGate, Fortinet, INC, INC Ransomware, Lynx, Security, SOCRadar

¶¶¶¶¶

Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat.

·

Agentic AI, AI Agent, Artificial Intelligence, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breach, JADEPUFFER, LLM, Malware, Ransomware, Security, Sysdig, vulnerability

¶¶¶¶¶

Ransomware-Proof Backup: 7 Strategies for Enterprise IT Teams

Ransomware-proof backup planning helps IT teams protect clean data copies, isolate storage, test recovery, and keep operations running after cyber attacks fast.

·

Backup, Business, cybersecurity, Malware, Ransomware, Security, Technology

¶¶¶¶¶

Fake “Google Notes” Browser Extension Caught Swapping Crypto Wallet Addresses

McAfee says a Google Notes browser extension is replacing copied crypto payment details, putting wallet transfers at risk for Chrome, Brave, and Microsoft Edge users.

·

Browser, Chromium, Crypto, Cyber Attack, cybersecurity, Extension, Fraud, Google Notes, Malware, mcafee, SCAM, Scams and Fraud, Security

¶¶¶¶¶

Fake Interpol Investigation Emails Push Ransomware at Small Businesses Globally

Fake Interpol investigation emails are targeting small businesses with Proton Drive links that deliver ransomware, encrypt files, and route victims to Tox chat.

·

Cyber Attack, Cyber Crime, cybersecurity, Fraud, Interpol, Malware, Ransomware, SCAM, Scams and Fraud, Security

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: Security