/
vendors:Amazon × limpar

Resultados

16 casos · pág. 1/1

f5.com · medium

F5 Labs releases canary exploit tool for Apache Parquet Java CVE-2025-30065 (CVSS 10) and assesses real-world risk as limited

F5 Labs published a "canary exploit" generator for CVE-2025-30065, a CVSS 10.0 flaw in the Apache Parquet Java parquet-avro Maven module. The tool lets defenders test whether their environments are vulnerable and confirm that patches and configuration are effective. F5's analysis finds the flaw far less severe than the CVSS score and earl…

securelist.com · high

Mirage Kitten deploys Node.js NodeRabbit RAT and JavaScript PollCat RAT via fake job coding challenges

Kaspersky researchers report that the APT group Mirage Kitten has moved from native C/C++/Go malware to Node.js and JavaScript implants, NodeRabbit and PollCat. Both are cross-platform RATs delivered through spear-phishing by fake recruiters on LinkedIn and other job platforms, using trojanized coding-challenge archives hosted on Amazon S…

greynoise.io · exploit público medium

Scanners spoofing OpenAI, Anthropic, Google and Perplexity AI crawlers probe for .env files, cloud keys and credentials

GreyNoise observed automated scanners impersonating the web crawlers of OpenAI, Anthropic, Google, Perplexity, DeepSeek and Amazon while requesting environment files, cloud access keys, private keys and password stores. A cluster of 13 forged AI crawler names from eight companies was seen; six names (belonging to Anthropic, OpenAI, Google…

DPRK-linked supply chain campaigns (ChainDrop, PolinRider) use Web3 blockchain C2 to steal cloud credentials from developer and CI/CD environments

Unit 42 reports that threat actors are moving supply chain malware C2 from hardcoded endpoints to Web3 mechanisms, so an entire botnet or worm infrastructure can be re-pointed with a single blockchain transaction. The ChainDrop npm worm (Shai-Hulud family, 400+ npm packages) and the PolinRider campaign (npm, Go modules, Packagist) target …

infostealers.com · medium

Infostealers weekly report 12-19 Oct 2026: Gmail, Google and Facebook credentials dominate stealer logs, Indian banks among top corporate victims

The weekly InfoStealers report for 12-19 October 2026 summarises stealer-log telemetry on compromised machines, credentials and sessions. The United States ranks 8 by country of infection with 438 machines. Gmail is the most affected email provider with 1,225,748 users, followed by Hotmail (90,554) and Yahoo (33,493). Sessions and saved c…

blog.checkpoint.com · medium

Q3 2026 brand phishing: Microsoft hits 33% of impersonation; lures target Claude, Antigravity, Apple, Docusign users

Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…

techcrunch.com · low

Users deploy AI coding agents such as Claude Code to strip ads, ACR tracking and bloatware from smart TVs via dumbtv and cleanyourtv

A growing number of developers and consumers are using AI coding agents, chiefly Claude Code, to remove sponsored ads, tracking features and preinstalled bloatware from smart TVs. Two GitHub projects, dumbtv (Muzzammil Yasin Sabuwala) and cleanyourtv (Gathin T.), package this approach. Cleanyourtv reportedly spread to a few thousand users…