Live36 d agoMalicious npm targets Claude AI user directory

31 articles4 streams

All articles

31 published articles · search, filter and sort as you wish.

Orden

Showing 11 of 11 articles

Ciberataques4 jun 20262 min

Megalodon malware hits 5,500+ GitHub repos in 6 hours

Megalodon malware pushed malicious commits to 5,500+ GitHub repos in six hours, stealing developer credentials and secrets.

Audit recent GitHub commits for unauthorized changes or unknown accounts
Rotate all tokens and API keys with write access immediately
Enable GitHub secret scanning with push protection across your org

Gorka El Bochi Morillo

Leer artículo

Ciberataques3 jun 20262 min

JINX-0164 hits crypto firms with fake recruiter macOS malware

JINX-0164 uses fake recruiter lures to deploy custom macOS malware against crypto firms and steal digital assets.

Leer artículo

Ciberataques1 jun 20262 min

Dutch police arrest admins of bulletproof hosting used by Russian hackers

Dutch authorities arrested two admins of a bulletproof hosting service — infrastructure that ignores legal takedown requests — used by Russia-aligned threat actors.

Leer artículo

Newsletter

Una historia al día. Cero ruido.

Elige las ramas que quieres recibir. Cancela cuando quieras.

1 email

/día

4 ramas

a elegir

20:00

CET

CVE · IA · Bug Bounty · Cyber
Sin spam, sin tracking invasivo

Ciberataques31 may 20262 min

Dutch police seize 200+ servers, kill 17M-device botnet

Dutch police take down a 17-million-device botnet and seize 200+ servers from a local hosting provider.

Leer artículo

Ciberataques30 may 20262 min

Kali365 PhaaS bypasses Microsoft 365 MFA via OAuth device code

FBI warns about Kali365 PhaaS platform stealing Microsoft 365 session tokens by abusing OAuth device code flow to bypass MFA.

Leer artículo

Ciberataques28 may 20262 min

Megalodon: 5,500 GitHub repos backdoored via Actions workflows

Over 5,500 GitHub repositories backdoored with malicious Actions workflows silently exfiltrating CI/CD secrets, keys, and credentials.

Leer artículo

Newsletter BBLabs

Lo que importa hoy, filtrado por la IA.

Un email al día con los CVE críticos, breaches activos, writeups jugosos y novedades en IA.

Personaliza qué ramas recibes
Un email al día · ~20:00 CET
Cancela en un clic

Recibe el próximo

Sin spam · sin tracking invasivo · cancela en 1 clic

Ciberataques26 may 20262 min

China's Webworm hits EU govs via Discord and Microsoft Graph

Chinese APT Webworm targets EU governments using Discord and Microsoft Graph API as covert command-and-control channels.

Leer artículo

Ciberataques26 may 20262 min

Linux rootkits, router 0-day, AI intrusions: 25 attacks

Attackers exploit trusted tokens, packages, and accounts across 25 incidents reported this week.

Leer artículo

Ciberataques26 may 20262 min

Megalodon: 5,561 GitHub repos hit with malicious CI/CD workflows

5,718 malicious commits pushed to 5,561 GitHub repos in six hours to steal CI/CD pipeline secrets.

Leer artículo

Newsletter

Recibe lo más relevante en tu inbox, sin paja.

Un email al día con los CVE, breaches, writeups y novedades en IA que de verdad importan. Cancela cuando quieras.

Ciberataques26 may 20262 min

FBI shuts down First VPN used by dozens of ransomware gangs

FBI shut down First VPN, a criminal VPN service used by dozens of ransomware groups for network reconnaissance and corporate intrusions.

Leer artículo

Ciberataques26 may 20262 min

Infosecurity Europe 2026: what to watch

Infosecurity Europe 2026 brings together ransomware, offensive AI, and critical infrastructure defense as the dominant themes in London.

Leer artículo