Cyberattack Hits French Supermarket Refrigeration
Coopérative U confirms refrigeration disruption. CERT-FR warns of compromised Danfoss AK-SM and…
MSP360 Phishing Turns One Fake Invitation Into Two Remote-Access Channels
Microsoft traced fake invitations and PDF lures to MSP360, then ScreenConnect. Why…
iPhone Duo Preorder Trap Starts a DarkSword Attack Before You Submit
A fake iPhone Duo offer loads DarkSword before the form is submitted.…
WordPress Template Flaw Enters KEV as Attacks Reach File Writes
CISA lists the exploited WordPress template flaw. Learn why theme and PHP…
Kiteworks Restores Systems After Precautionary Shutdown
Kiteworks lifted its shutdown recommendation and reported a fix for a limited-capability…
AWS Quarantined a Leaked Key in 10 Seconds. The Response Wasn’t Over.
Unit 42 measured AWS quarantining a public GitHub key leak in 10…
AgentCore Harness Test Exposes a Service Token Through Memory
Unit 42 demonstrated AgentCore credential theft through a support ticket. See why…
LeakySensey Rents Out Hacked Routers as a Proxy Network
LeakySensey turned weak VPN logins into rented proxies. What the exposed server…
Settra Ransomware Leaves a Defender Log Intact After a Typo
Huntress found that Settra misspelled a Defender event-log name. What survived, how…
AI Access Thief Sends 43 KB of Agent Context to a Honeypot
An attacker’s coding agent exposed instructions, keys and history to a research…
Claude Code Auto Mode: Check What an Approved Command Can Reach
A controlled Opus 5 test turned a website summary into code execution.…
AI-Assisted Intrusion: Stolen Cloud Keys Outlive a Blocked Change
Unit 42 corrected its account to an intrusion. Review stolen credentials and…