Security analysts from Beazley Security and SentinelOne have uncovered a campaign distributing an updated version of PXA Stealer, a Python-based info-stealer. The malware has reportedly compromised more than 4,000 victims across 62 countries. Believed to be operated by Vietnamese-speaking hackers, PXA Stealer is monetized through Telegram, where the stolen
![Cisco User Data Stolen from Cisco[.]com](/content/images/size/w600/2025/08/photo_2025-08-07_07-46-56.jpg)
Cisco has confirmed that unknown attackers stole user data from Cisco[.]com in a vishing (voice phishing) attack that targeted one of its employees. The breach was first detected on July 24, 2025. According to Cisco’s internal investigation, the attacker gained unauthorized access to a third-party cloud-based customer relationship
Researchers at Nextron Systems have uncovered a sophisticated Linux backdoor, dubbed Plague, that managed to stay hidden for more than a year. The malware provides attackers with persistent SSH access and enables authentication bypass on compromised systems—without triggering alerts from traditional security tools. Plague masquerades as a malicious PAM
A newly discovered Android Trojan named PlayPraetor has infected more than 11,000 devices, according to security experts at Cleafy. The malware continues to spread rapidly, with an estimated 2,000 new infections reported each week. At present, the Trojan is targeting users in Portugal, Spain, France, Morocco, Peru, and
Anthropic has revoked OpenAI’s access to its Claude API, accusing the rival AI firm of violating its Terms of Service (ToS) by using Claude during the development of GPT-5. Key Allegations Anthropic claims that OpenAI broke its commercial usage rules, which prohibit: * Using Claude to develop competing AI models
Security researchers at Safety have uncovered a malicious npm package, likely AI-generated, that was designed to steal cryptocurrency wallet data from unsuspecting developers. Key Details * Package Name: @kodane/patch-manager (now removed from npm) * Disguise: Posed as a performance optimization tool, claiming to provide “advanced license validation and registry optimization for
Investigators have uncovered a vulnerability in Google’s "Refresh Outdated Content" tool that allowed unauthorized removal of search result entries—allegedly exploited to suppress negative reporting about the CEO of a major San Francisco tech company. How It Happened The flaw came to light following reports by journalist
The developers behind Pi-hole, the widely used DNS-level ad blocker, have disclosed a data leak exposing the names and email addresses of thousands of donors. The breach stemmed from a vulnerability in the GiveWP WordPress plugin used on their donation page. What Happened? Pi-hole, originally designed for Raspberry Pi devices,
Mozilla has issued an urgent warning to browser extension developers about an ongoing phishing campaign targeting accounts on the official addons.mozilla.org (AMO) platform. AMO hosts more than 60,000 extensions and 500,000 themes, serving millions of users around the world. How the Attack Works The phishing scheme
The Kali Linux team has officially announced support for running Kali in containers on macOS Sequoia, leveraging Apple’s new virtualization and containerization features. This marks a significant step for developers and security professionals who use Apple Silicon devices and want direct access to Kali’s tools without a full
Google has reversed its original decision to fully shut down the goo.gl URL shortening service by August 2025. After significant user feedback, the company confirmed that some links will remain active past the previously announced cutoff date. Background Launched in 2009, goo.gl was Google’s official URL shortening
A newly discovered vulnerability in Google’s Gemini CLI—a command-line interface for its AI coding assistant—could have allowed attackers to silently run malicious code on developers’ machines, exfiltrate sensitive data, and compromise trusted workflows. Security researchers at Tracebit identified the issue just two days after the tool’s