Yoba Fake AI Installers Hide a Miner Behind Signed Apps
Check Point traced Yoba from fake ChatGPT and Claude downloads to signed-app…
Railway Explains Why New API Keys Were Revoked
Railway says newer API keys entered a precautionary revocation list by mistake.…
LiteLLM 1.107.0 Stole Secrets at Python Startup
A leaked key led to LiteLLM 1.107.0’s poisoned release. See how Python…
OVHcloud CLI Release Swap: A Saved Hash Caught the Malware
OVHcloud CLI files were swapped under old version labels on October 19.…
GitPower Uses Fake Conference Invitations to Target Ukrainian Experts
Genians links fake conference invitations to GitPower attacks on Ukrainian experts. A…
AWS Quarantined a Leaked Key in 10 Seconds. The Response Wasn’t Over.
Unit 42 measured AWS quarantining a public GitHub key leak in 10…
AI Token Jacking: Stolen API Keys Fueled Nearly $1M Bills
Unit 42 says criminals added stolen AI API keys to gray-market proxy…
Leaked n8n API Tokens Exposed 321 Live Instances
GitGuardian found 321 reachable n8n instances still accepting API tokens leaked in…
Keyv npm Worm Poisoned 444 Packages: Check Before Rotating Tokens
The Keyv npm worm poisoned hundreds of packages and can react when…
Malware Modified Your Git Commits? PolinRider Recovery
Find PolinRider Git rewrite artifacts, preserve commit evidence, clean affected repositories and…
XCSSET v40 Turns Xcode Projects Into a macOS Supply-Chain Trap
XCSSET v40 runs through trojanized Xcode projects and adds fileless persistence, browser…
Cursor git.exe Flaw: Check Windows Repositories Before Opening
A disclosed Cursor flaw can run a repository-local git.exe on Windows when…