Over 116,000 Minecraft systems infected in WeedHack malware campaign By Bill Toulas June 2, 2026 05:54 PM A large-scale malware campaign dubbed WeedHack is targeting Minecraft players and has…
…For those managing Fortinet devices, Beaumont has published the list of IP addresses targeted in this campaign. Organizations utilizing FortiGate devices should review this list and investigate whether any of their systems…
…more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. Most of the affected packages are in the @antv ecosystem…
…Telegram Mini Apps abused for crypto scams, Android malware delivery Over 116,000 Minecraft systems infected in WeedHack malware campaign WordPress malware campaign hides payloads in Steam profiles ChatGPT share links abused…
…The threat actor exfiltrated Customer Relationship Management (CRM) data and launched an extortion campaign. LastPass has disabled employee access to Klue, rotated the exposed API/OAuth tokens, and notified law enforcement while…
Chinese hackers breach REDCap servers, steal medical research By Bill Toulas June 15, 2026 10:00 AM A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and…
…the machine by deploying the legitimate remote management ScreenConnect tool, which could later be used to install additional malware. Microsoft researchers discovered the campaign and determined that the attack begins when users…
…The Shai-Hulud campaign emerged last September and had multiple iterations [ 1 , 2 , 3 ], some of them exposing hundreds of thousands of developer secrets in automatically generated GitHub repositories. Among more recently…
Chinese hackers target telcos with new Linux, Windows malware By Bill Toulas May 21, 2026 10:00 AM A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux…
…The FBI warns that Kali365 gives even low-skilled attackers access to advanced phishing capabilities, including AI-generated phishing lures, automated campaign templates, real-time victim-tracking dashboards, and token-capture functionality…