New XCSSET malware variant targets macOS developers via compromised
XCSSET malware infects macOS developers through compromised Xcode projects and GitHub repos, enabling credential theft and browser hijacking.
In this digest
Security Intel Feed
Page 70 of 93
XCSSET malware infects macOS developers through compromised Xcode projects and GitHub repos, enabling credential theft and browser hijacking.
In this digest
Brazil's SISVISA platform exposed 79GB of sensitive health data publicly without password or encryption.
In this digest
Palo Alto's NOVA AI autonomously discovered over 14,000 zero-day vulnerabilities across thousands of open-source projects.
In this digest
BINDCLOAK backdoor steals Windows tokens to escalate privileges in espionage targeting Middle East energy sector.
In this digest
North Korean hackers use empty Ethereum transactions to conceal malware command servers targeting developers via malicious npm packages.
Read digestA heap-buffer-overflow in Gimp's APNG loader poses a serious risk when fctl width exceeds ihdr width.
In this digest
A security assessment found 68 vulnerabilities in over 21,000 MCP servers, including SQL injection and SSRF, with most lacking OAuth.
In this digest
A critical remote command injection vulnerability affects GL.iNet GL-MT3000 devices up to firmware 4.4.5 with public exploit code.
Read digestThis cycle reports 20 other CVEs without scores and no major new vulnerabilities disclosed.
In this digest
Attackers exploit an authentication bypass flaw in N-able RMM servers allowing admin-level access via patch bypass.
In this digest
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check