Daily Cyber News coverage tagged Malware.
Cloud, AI, and developer credentials may be compromised on systems that ran LiteLLM 1.107.0. Attackers inserted a credential stealer and remote-access backdoor into the release distributed through Python and Docker registries. The malware targeted browser data, cloud credentials, AI provider keys, SSH…
Chrome is adding warnings designed to interrupt scams before users expose systems or data. Enhanced Protection can now detect suspicious copied commands used in ClickFix attacks and send a scrubbed clipboard payload for analysis. Server-side Gemini analysis also evaluates pages showing strong scam…
A NATO-country shipbuilder was compromised during a Russia-linked espionage campaign that also targeted an aircraft engine maker and a law enforcement agency. The attackers delivered the Hookedge backdoor through an infected Microsoft Word document. They returned to the shipbuilder’s environment…
WordPress sites were backdoored through valid UpdraftCentral management keys after TeamUpdraft detected unauthorized access to its infrastructure. The vendor believes its customer database was accessed and replaced potentially affected keys and credentials. Researchers said attackers used stolen keys to…