Security insights, vulnerability roundups, and updates from the Agent Breach team.
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
A new macOS malware named PamStealer steals login credentials by mimicking the popular Maccy clipboard tool. Security teams should monitor for unusual AppleScript executions and unauthorized PAM access.
Read moreNew research reveals how malicious AI agent skills evade detection using self-extracting packing techniques. Simple obfuscation tricks bypass static analysis tools with over 90% success.
Read moreA critical flaw in Opera GX enabled malicious sites to auto-install browser mods and steal user data without interaction. The vulnerability has been patched by Opera.
Read moreA European Parliament member investigating commercial surveillance tools was himself targeted with NSO Group's Pegasus spyware. Forensic analysis confirms repeated compromises of his mobile device.
Read moreWhile AI transforms cybercrime tactics, small businesses remain vulnerable due to basic security oversights. Experts emphasize foundational defenses over advanced tools.
Read moreA new threat group called Armored Likho is targeting government and energy sectors across multiple countries. The group uses the BusySnake information stealer in blended espionage and financial campaigns.
Read moreState-sponsored threat actors are actively compromising maintainer accounts to distribute malware via popular package repositories and browser extensions. Security teams should review dependencies and monitor for suspicious updates.
Read moreA U.S. government entity allegedly paid $1 million to prevent leaked data, raising questions about attribution and extortion tactics. The group, calling itself Kairos, may not be a traditional ransomware actor.
Read moreMalicious npm packages mimicking popular Rollup polyfill tools have been linked to North Korean threat actors. These packages aim to steal developer credentials and enable remote access.
Read moreA recently patched vulnerability in Ubuntu's cifs-utils could allow local attackers to gain root access. A subsequent regression in the fix complicates remediation.
Read more