5 casos · pág. 1/1
Dark Reading reports on PHP2Shell, a set of critical PHP flaws, and gathers advice from cyber experts on how defenders can assess their exposure. The article's central point is that fixing the flaws is not as simple as applying an update. It offers guidance on evaluating risk and on protective steps. The available text does not give techn…
On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …
A flaw dubbed SneakPeek in the preview pane of Anthropic's Claude Code Desktop can let adversaries quietly steal credentials from developers without any user interaction (zero-click). According to the report, exposed secrets include SSH private keys, AWS credentials and Claude OAuth tokens. The article excerpt provides no CVE identifier, …
A cybercrime marketplace tracked as Yam Store supplied cloud infrastructure and phishing kits that helped drive more than 1 billion phishing messages worldwide. The marketplace appears to work as an enabling service, letting other criminals run large-scale phishing campaigns without building their own tooling. The source article is a shor…
A Dark Reading report describes AdFection, a technique in which spyware vendors exploit targeted ad bidding in the digital advertising ecosystem to identify and track individuals and organizations of interest. Ad impressions are reportedly turned into a zero-click delivery path for spyware, so targets need no interaction. The excerpt give…
