/
attack_type:account_takeover × latest_source_host:thehackernews.com × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

Attacker hijacks contributor GitHub account to swap binaries on five OVHcloud CLI releases with secret-stealing build

On 19 October 2026 an attacker used a hijacked contributor's GitHub account to replace the download archives on five existing releases (v0.11.0 to v0.15.0) of OVHcloud CLI. The swapped files were a build designed to steal secrets stored on the disk of any machine that ran it. They were live from 12:47 to 14:21 UTC (up to 94 minutes) for m…

technology cloud services
thehackernews.com · high

UAT-11985 targets Taiwan research affiliates with AI-assisted event-invite phishing and Google AitM credential and MFA theft

Cisco Talos disclosed an APT spear-phishing and quishing campaign, tracked as UAT-11985, that targets individuals affiliated with Taiwan research organizations. First seen in mid-2026, it uses fake event invitations to lead victims to an adversary-in-the-middle (AitM) phishing framework that harvests Google account credentials and MFA cod…

UAT-11985 research academia