⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
BleepingComputer reports Arch Linux disabled AUR package adoption to combat a wave of malware submissions. Malicious packages containing backdoors and cryptominers were targeting AUR users.
BleepingComputer reports that online advertising firm Adform's script was compromised to steal cryptocurrency from visitors. The attack injected wallet-swapping code affecting numerous publisher sites.
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones controlled by an attacker.
<button class="btn-collapse" type="button" aria-expanded="true".
Microsoft has identified a cyberespionage campaign dubbed "CaptiveCrunch," conducted by Storm-2945, a sub-cluster of the Russian-linked threat group Midnight Blizzard. Since May 2026, the group has manipulated DNS and HTTP traffic on Wi-Fi networks using captive portals—common in hotels, conference centers, and other hospitality venues—to redirect users to malicious infrastructure.
The CaptiveCrunch campaign by Midnight Blizzard targets travelers worldwide by compromising hotel Wi-Fi captive portals. Attackers deliver malware and steal credentials, and Microsoft advises using full-tunnel VPNs and avoiding portal updates.