⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cybersecurity researchers have discovered a cluster of 13 npm packages that deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family exhibits functional overlaps with two malware strains associated with the Democratic People's Republic of Korea's (DPRK) Contagious Interview campaign: BeaverTail and OtterCookie. WeaselBiscuit is smaller, lighter, and stripped down, harvesting Chrome extension storage across Windows, macOS, and Linux.
Analysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure your agents. The post A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity appeared first on Unit 42.
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems.
A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry. "The developer likely wrote the malware using a large language model (LLM), an assessment made with high confidence based on verbose comments, placeholder code, and statistical token-analysis patterns," CrowdStrike's Counter Adversary Operations said in an analysis published this week.
Whether you are a victim, the parent of a victim, or just concerned, here is what you can do about fake nude images generated by so-called nudify applications. The article provides practical guidance on reporting non-consensual deepfake images to platforms, preserving evidence, seeking legal remedies, and accessing mental health resources.