/
ttps_attack:T1070.004 × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

safedep.io · critical

MemTensor npm and PyPI packages backdoored with self-propagating Go worm sckit after GitHub Actions release token theft

On September 23, 2026, an attacker published malicious versions of @memtensor/memos-cloud-openclaw-plugin (npm, versions 0.1.21, 0.1.23 and 0.1.25 per the article) and the MemoryOS Python library (PyPI, 2.0.34). Both carry the same Go implant, sckit, which harvests credentials from the home directory, exfiltrates them to servers under sky…

technology software_development
gbhackers.com · · 2 fontes · 2 atualizações critical

CISA advisory: SafePay ransomware has hit 600+ organizations and destroys backups via VSS shutdown and NAS factory resets

A joint advisory published on October 20, 2026 by CISA, the FBI, the United States Secret Service and German and UK law enforcement says SafePay ransomware actors have compromised at least 600 organizations across critical infrastructure sectors in North America, South America, Europe and Australia since August 2024. The findings cover in…

CVE-2020-3259 CVE-2023-20269 CVE-2023-27532 SafePay critical infrastructure government