GLossary

More

News

More
Yoti Reported GrapheneOS User to Authorities

Yoti Flagged A Playstation User to Authorities for Running GrapheneOS on their Phone

The CyberSec Guru

Sony’s age-verification partner Yoti reportedly flagged a GrapheneOS user to authorities. Here’s what actually happened and why it matters for everyone

Chinese APT VerdantBamboo Evades M365 Security for 18 Months

Silent Persistence: How Chinese APT ‘VerdantBamboo’ Spent 18 Months Inside Microsoft 365 Using Custom Malware

The CyberSec Guru

Discover how Chinese espionage group UNC5221 (VerdantBamboo) used Brickstorm & Plenet to hide inside Microsoft 365 and MSP networks for over 18 months

Hades PyPI Malware

Hades Descends to PyPI: Miasma Supply Chain Campaign Spreads via Malicious .pth Startup Hooks

The CyberSec Guru

Security researchers detect “Hades,” a PyPI branch of the Mini Shai-Hulud / Miasma malware lineage. Over 37 packages compromised via .pth startup hooks.

Miasma Worm Targets AI Coding Agents

Miasma Worm Weaponizes AI Coding Agents: Inside the Microsoft Azure and GitHub Supply Chain Attack Campaign

The CyberSec Guru

The Miasma worm targets AI coding agents via GitHub. Learn how the campaign compromised Azure durabletask & caused 73 repos to be disabled

Red Hat npm Packages Compromised

Supply Chain Crisis: Over 30 Red Hat npm Packages Hijacked to Spread the Self-Propagating ‘Miasma’ Worm

The CyberSec Guru

Over 30 @redhat-cloud-services npm packages have been compromised with ‘Miasma’, a self-propagating credential-stealing worm. Read analysis

Advisory

More
AnyDesk Hacked

Remote Desktop Software AnyDesk Hacked, Users Urged to Change Passwords

AnyDesk hacked: Cyberattack compromises production systems, raising concerns over source code security and user data. Immediate actions taken, passwords revoked, and new security measures implemented

Jenkins Security Alert Critical Vulnerability Exposes Servers to Remote Code Execution (RCE) Attacks

Jenkins Security Alert: Critical Vulnerability Exposes Servers to Remote Code Execution (RCE) Attacks

Jenkins Security Alert: Critical vulnerability poses remote code execution risk. Servers exposed. Immediate action required to patch and safeguard systems against potential exploitation. Stay vigilant