/
victim_sectors:research × limpar

Resultados

3 casos · pág. 1/1

thehackernews.com · high

UAT-11985 targets Taiwan research affiliates with AI-assisted event-invite phishing and Google AitM credential and MFA theft

Cisco Talos disclosed an APT spear-phishing and quishing campaign, tracked as UAT-11985, that targets individuals affiliated with Taiwan research organizations. First seen in mid-2026, it uses fake event invitations to lead victims to an adversary-in-the-middle (AitM) phishing framework that harvests Google account credentials and MFA cod…

safedep.io · high

mrmustard 0.7.4 PyPI release trojanized via maintainer account takeover; steals SSH, AWS and Kubernetes credentials

A malicious version 0.7.4 of the mrmustard photonic quantum computing library (Xanadu) was published to PyPI on July 23, 2026, after the account of the project's lead maintainer (ziofil, Filippo Miatto) was compromised. Importing the package reads SSH private keys, AWS credentials and the Kubernetes config, then sends them to an attacker-…

bitdefender.com · medium

US offers $10M Rewards for Justice bounty for Hafnium (Silk Typhoon) suspect Zhang Yu over Exchange Server attacks

The US State Department is offering up to US $10 million through Rewards for Justice for information on Zhang Yu, 44, a Chinese national accused of being a key figure in the state-sponsored group Hafnium (also tracked as Silk Typhoon). Zhang is described as a director at Shanghai Firetech Information Science and Technology, working under …