Intelligence Feed

1mo ago · hacker-news

Four compromised npm packages under the @asyncapi namespace have been used to distribute a multi-stage botnet loader that downloads the Miasma malware from IPFS. The malicious code executes when the package is loaded via require(), not during install, evading traditional detection. The malware supports multiple C2 channels, enables credential theft, lateral movement, and includes a dead man's switch. The attack leveraged compromised CI/CD pipelines with legitimate OIDC attestations, not stolen npm tokens.

1mo ago · hacker-news

Microsoft's July 2026 Patch Tuesday addresses a record 622 vulnerabilities, including two actively exploited zero-days. CVE-2026-56164 is a privilege escalation flaw in SharePoint Server exploited by unauthenticated attackers over the network. CVE-2026-56155 is a local privilege escalation in Active Directory Federation Services exploited by authenticated attackers. Despite moderate severity ratings, both are under active attack and require immediate patching.

1mo ago · hacker-news

Researchers have identified a vulnerability in the Claude for Chrome browser extension that allows rogue extensions to trigger unauthorized actions, such as reading Gmail, Google Docs, and Calendar data, by exploiting forged script-generated clicks. The flaw stems from the extension's failure to validate the authenticity of user interactions (event.isTrusted), enabling malicious extensions to simulate clicks and initiate sensitive tasks. If users have enabled 'Act without asking' mode, these actions execute silently without approval, increasing the risk to critical levels. The issue remains unpatched as of version 1.0.80, despite being reported to Anthropic in May 2026.

1mo ago · hacker-news

SAP has released security updates to address multiple critical vulnerabilities, including CVE-2026-44747, a CVSS 9.9 out-of-bounds write flaw in SAP NetWeaver ABAP that could allow authenticated attackers to cause memory corruption and potentially access or modify sensitive data. Two other critical flaws were also patched: CVE-2026-27690, an HTTP smuggling vulnerability in SAP Approuter, and CVE-2026-44761, a default credentials issue in SAP Commerce Cloud stemming from sample configuration scripts. Although no active exploitation has been observed, attackers could leverage these flaws to gain unauthorized access, manipulate data, or cause denial-of-service conditions if left unpatched.

1mo ago · hacker-news

Two critical vulnerabilities in RabbitMQ, CVE-2026-57219 and CVE-2026-57221, could allow unauthenticated attackers to leak OAuth client secrets and enable authenticated users to bypass tenant boundaries by accessing cross-tenant queue metadata. The flaws, present since early 2024, affect RabbitMQ versions 3.13.0 and later and have been patched in recent releases. CVE-2026-57219 exposes a misconfigured HTTP API endpoint that leaks sensitive OAuth secrets, posing high risk in cloud or multi-tenant environments with exposed management interfaces.

1mo ago · hacker-news

LabubaRAT is a Rust-based remote access trojan (RAT) that masquerades as NVIDIA software to evade detection and establish persistent access on Windows hosts. It supports multiple communication methods including HTTPS, WebView2, and DNS tunneling, and can be configured at runtime via command-line arguments or Base64-encoded input. The malware profiles the host environment, collects system information, and enables operators to execute commands, capture screenshots, transfer files, and route traffic via SOCKS5 proxy. Evidence suggests it may be distributed as malware-as-a-service (MaaS), with infrastructure linked to 'LabubaPanel'.

1mo ago · hacker-news

Two threat actor groups, UNK_pyreq2323 and UNK_OutFlareAZ, are exploiting OAuth client ID spoofing to validate stolen Microsoft Entra ID credentials without triggering successful sign-in events. By using spoofed but syntactically valid OAuth client IDs in ROPC authentication flows, attackers can enumerate valid accounts and passwords at scale while evading detection. The technique bypasses Conditional Access policies and leaves minimal telemetry, making it difficult for defenders to detect malicious activity.

1mo ago · hacker-news

The article discusses how Pentera leverages AI to transform security workflows by integrating validated attack path data into AI-driven decision-making. It emphasizes the importance of moving beyond theoretical risk signals to evidence-based validation of exploitable vulnerabilities. Pentera's platform safely emulates real-world attacks to identify actual attack paths, enabling security teams to prioritize remediation based on proven exploitability. The integration is facilitated through Pentera's MCP Server, which feeds validation data directly into AI workflows without exposing new network services.

1mo ago · hacker-news

A study of 85 crypto wallet browser extensions by KU Leuven researchers revealed widespread privacy leaks that enable tracking and potential de-anonymization of users. The wallets expose users' addresses through normal operations, allowing linkage of multiple addresses, persistent tracking across sites, and cross-site address leakage via embedded frames. Despite responsible disclosure, most wallet vendors did not classify these issues as bugs, citing design intent or low risk, leaving users exposed to identity correlation even without malicious exploitation.

1mo ago · hacker-news

Cybersecurity researchers have identified 11 outdated, Microsoft-signed UEFI shim bootloaders that can be exploited to bypass Secure Boot protections on UEFI-based systems. These vulnerable shims allow attackers to execute arbitrary code during the early boot phase, enabling deployment of persistent UEFI bootkits such as Bootkitty and BlackLotus. Although the Microsoft Corporation UEFI CA 2011 certificate expired in June 2026, affected systems remain at risk if the vulnerable shims are not explicitly revoked via hash. The issue highlights a supply chain exposure where outdated but still-trusted bootloaders undermine critical firmware security mechanisms.

1mo ago · hacker-news

Microsoft has identified three attack paths used by threat actors associated with ShinyHunters to compromise Salesforce environments over a year-long campaign from mid-2025 to mid-2026. The attackers exploited trusted OAuth integrations through vishing attacks, stole OAuth tokens from compromised third-party vendors like Drift, Gainsight, and Klue, and abused misconfigured guest access in Salesforce Experience Cloud sites. These methods allowed persistent access to CRM data without exploiting platform vulnerabilities, blending malicious activity with legitimate traffic. The campaigns targeted organizations across retail, education, and manufacturing sectors, leveraging social engineering, supply chain compromises, and poor identity governance.

1mo ago · hacker-news

A cyber threat campaign distributed 148 malicious npm packages disguised as student web proxies, which when accessed via browser turned devices into a DDoS botnet. The packages hosted a proxy application named 'Lucide' that appeared legitimate but silently loaded remote code and executed WebSocket-based attacks. The malicious infrastructure leveraged GitHub repositories and CDNs to deliver payloads, targeting a nursing school's domain and Wisp proxy servers. The operators maintained persistent control through mutable branches and could re-enable DDoS capabilities at any time.

1mo ago · hacker-news

The U.S. Treasury has sanctioned a Ukrainian individual and a Belarusian national for supporting ransomware operations through a malicious VPN service and cryptor sales. Dmytro Rashevskyi operated First VPN Service (1VPNS), which enabled ransomware groups to conceal their activities by providing anonymous access to infrastructure. Yegeniy Silayev sold cryptors to help cybercriminals obfuscate malware, contributing to attacks on U.S. businesses, hospitals, and government entities. The activity is linked to significant financial losses and exploitation of known vulnerabilities in network devices.

1mo ago · hacker-news

xAI's Grok Build coding CLI was found uploading entire Git repositories, including full commit history, to a Google Cloud Storage bucket without user consent. The data included tracked files and credentials, even when the 'Improve the model' setting was disabled. Although xAI later disabled the upload feature server-side, the incident exposed sensitive source code and secrets by design, raising serious data privacy and security concerns for developers using the tool.

1mo ago · hacker-news

Researchers have identified a new attack technique called 'stealth memory injection,' dubbed MemGhost, that enables attackers to plant persistent false memories in AI agents through a single malicious email. The attack manipulates AI assistants that read emails and maintain persistent memory files, allowing an adversary to silently alter the agent's behavior in future sessions without detection. The technique was successfully tested against OpenClaw and Claude-based agents, with high success rates in background execution modes, highlighting a critical risk in AI systems that combine untrusted input processing with autonomous memory updates.

1mo ago · hacker-news

Multiple threat actors are leveraging compromised software supply chains, AI-driven attacks, and unpatched vulnerabilities to deploy malware, steal credentials, and conduct ransomware operations. Notable activities include the exploitation of Citrix Bleed 2 (CVE-2025-5777) for DragonForce ransomware deployment, a compromised npm package distributing a Rust-based stealer, and the emergence of HalluSquatting attacks targeting AI coding assistants. Additionally, new backdoors like GigaWiper and RedHook are being used for persistent access and data exfiltration across Windows and Android platforms.

1mo ago · hacker-news

Google and Microsoft removed the ModHeader browser extension, which had approximately 1.6 million installs, after researchers discovered a dormant browsing-history collector embedded in its code. The collector, capable of gathering and exfiltrating encrypted browsing data, was inactive due to an empty allow-list but could be activated remotely via a routine update. The extension had been pinging tracking domains and logging request metadata, raising concerns about supply chain integrity and the stealthy potential of signed, popular extensions to harvest user data.

1mo ago · hacker-news

CrashStealer is a newly identified macOS information stealer written in native C++ that evades Gatekeeper by using a signed and Apple-notarized dropper. It harvests credentials from browsers, cryptocurrency wallets, password managers, and keychain data, encrypts the stolen data using AES-GCM, and exfiltrates it to an attacker-controlled server. The malware employs analysis resistance techniques such as control-flow flattening and anti-debugging, and uses a multi-stage delivery chain involving a GitHub-hosted payload.

1mo ago · hacker-news

An unknown threat actor leveraged a suspected AI-generated PowerShell script to perform aggressive Active Directory enumeration following initial access via RDP with compromised credentials. The script conducted reconnaissance by mapping users, computers, domains, and other AD components, then exported data into CSV and HTML files. The attacker later deployed legitimate tools like s5cmd and SharpShares for further data discovery and exfiltration. This incident highlights how AI is being used as a force multiplier to accelerate traditional attack chains, lowering the barrier for less-skilled attackers to conduct damaging campaigns rapidly.

1mo ago · hacker-news

The article discusses the application of Daniel Kahneman's dual-process theory of human cognition to security operations centers (SOCs), advocating for a two-tiered AI architecture that mirrors 'System 1' (fast, automatic processing) and 'System 2' (slow, deliberate thinking). It highlights that 98% of security alerts can be autonomously resolved using fast, forensic-grade AI, while only 2% require human judgment and deeper analysis. The core argument is that misapplying human or AI resources to inappropriate tasks leads to missed threats and analyst burnout. The recommended model integrates autonomous investigation for scale and AI copilots for human-augmented decision-making, creating a feedback loop that improves over time.

1mo ago · hacker-news

Meta has filed a patent for an AI system capable of continuously monitoring a user's voice, biometrics, and device usage to infer emotional states throughout the day. The system could run on smart glasses, phones, or smart home devices, logging emotional data with timestamps, location, and activity context. While not currently implemented in any product, the technology raises significant privacy concerns due to its extensive data collection, including voice tone, pupil size, blink rate, and app usage. The EU AI Act has already restricted emotion-inference technologies in workplaces and schools, and similar consumer-facing systems may face regulatory scrutiny.

1mo ago · hacker-news

A phishing-as-a-service (PhaaS) platform named Forg365 is targeting Microsoft 365 users through sophisticated attack chains involving device code phishing, adversary-in-the-middle (AitM) session theft, and AI-generated lures. The service is offered via Telegram for $400/month and leverages legitimate email services like Amazon SES and SendGrid to evade detection. It enables low-skilled attackers to conduct large-scale phishing operations with post-compromise capabilities such as token vaulting, cookie injection, and AI-assisted email drafting.

1mo ago · hacker-news

A misconfigured server exposed three active Evilginx phishing operations targeting Microsoft 365 users, enabling attackers to bypass MFA through proxy-based login interception and abuse of Microsoft's legitimate device code flow. The operations, attributed to threat actors codemado, mail-argenta, and saroula01, leveraged custom forks of open-source Evilginx hosted on public GitHub repositories. One campaign used AI-assisted development, and all three harvested corporate credentials, with sessions maintained via long-lived cookies and token refresh mechanisms. The incident highlights the growing accessibility of phishing-as-a-service and the need for robust Conditional Access policies.

1mo ago · hacker-news

The U.S. CISA has added two critical vulnerabilities in Joomla extensions iCagenda and Balbooa Forms to its Known Exploited Vulnerabilities catalog due to active zero-day exploitation. CVE-2026-48939 and CVE-2026-56291, both rated 10.0 CVSS, allow unauthenticated remote code execution via arbitrary file upload. These flaws are being exploited in automated attacks to deploy web shells on vulnerable Joomla sites. Australia's ACSC has also warned of a global campaign exploiting similar CMS vulnerabilities.

1mo ago · hacker-news

Cyber espionage campaigns targeting Pakistani law enforcement agencies, including the Balochistan Police, have been conducted by suspected China- and India-aligned threat actors between February 2024 and April 2026. The attackers exploited web applications such as the Complaint Management System to deploy custom malware, including PlugX, ShadowPad, Cobalt Strike, and Remcos RAT. These operations targeted sensitive data including biometric records, criminal files, and personnel information, with infrastructure overlaps linking some activity to known threat groups like Mysterious Elephant. The compromise of public-facing portals extended the attack surface to both law enforcement and citizens.

1mo ago · hacker-news

A malicious version (8.14.0) of the jscrambler npm package was published with a preinstall hook that drops a cross-platform Rust infostealer. The payload targets developers by stealing cloud credentials, cryptocurrency wallets, password manager data, and API keys from AI coding tools. It establishes persistence and communicates with attacker-controlled infrastructure, including hard-coded IP addresses and Tor. The compromised version remains on npm, posing ongoing risk to systems using outdated clients that automatically execute install scripts.

1mo ago · hacker-news

A critical stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client could allow attackers to execute malicious scripts in user sessions via specially crafted emails. If exploited, the flaw could enable access to mailbox data, session information, and account settings. While Zimbra has not confirmed active exploitation, similar XSS flaws in Zimbra have been historically targeted. Users are advised to update to Zimbra Collaboration Suite version 10.1.19 for protection.

1mo ago · hacker-news

Researchers at Ledger's Donjon security team demonstrated a laser fault injection attack that can reset the password on Tangem crypto wallet cards without requiring the original password or a backup card. The attack requires physical access to the card and sophisticated, expensive equipment, making it impractical for widespread use. However, because Tangem cards lack firmware update capability, the vulnerability cannot be patched, leaving all existing cards permanently exposed. The risk is highest for lost or stolen cards containing significant cryptocurrency value.

1mo ago · hacker-news

Progress Software has instructed ShareFile customers to immediately shut down their Storage Zone Controllers due to a credible external security threat. The affected component is the self-hosted Storage Zone Controller, which is internet-facing and thus exposed to potential exploitation. While Progress states there is no evidence of unauthorized access to accounts or data, it has not disclosed the nature of the threat or the responsible actor. The lack of a patch and the directive to fully power down systems suggest a critical, unpatched vulnerability or potential compromise of credentials or internal systems.

1mo ago · hacker-news

A threat actor tracked as O-UNC-066 is conducting vishing attacks to trick Microsoft 365 users into enrolling attacker-controlled passkeys through a phishing kit that mimics the legitimate Microsoft Entra passkey enrollment process. The attackers register domains with 'passkey' in the name and use voice calls to socially engineer victims into following a fake enrollment flow, ultimately granting unauthorized access to their accounts. The phishing kit is operator-controlled and adapts in real time to the victim's MFA method, allowing the attacker to capture credentials and approve passkey registration. This campaign targets multiple industries and abuses Microsoft's passkey adoption initiative as a social engineering lure.