NetmanageIT CTO Corner

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

COLDCARD security audit phishing attack installs remote access tool

COLDCARD security audit phishing attack installs remote access tool

BleepingComputer

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

BleepingComputer

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Google Blogger locks hundreds of blogs in malware false positive

Google Blogger locks hundreds of blogs in malware false positive

BleepingComputer

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

How AI-powered phishing killed blocklists for good

How AI-powered phishing killed blocklists for good

BleepingComputer

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

QuickFox Supply Chain Attack Delivers FDMTP Backdoor Through Trojanized Windows Installer

QuickFox Supply Chain Attack Delivers FDMTP Backdoor Through Trojanized Windows Installer

OpenAI, Anthropic AI agents targeted real people and systems in cyber tests

OpenAI, Anthropic AI agents targeted real people and systems in cyber tests

BleepingComputer

TP-Link patches Omada ZTP flaws allowing hackers to breach networks

TP-Link patches Omada ZTP flaws allowing hackers to breach networks

BleepingComputer

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

BleepingComputer

New XCSSET variant targets macOS devs via compromised Xcode projects

New XCSSET variant targets macOS devs via compromised Xcode projects

BleepingComputer

77 Open VSX extensions found harvesting developer info

77 Open VSX extensions found harvesting developer info

BleepingComputer

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Massive ChainDrop npm supply-chain attack infects hundreds of packages

BleepingComputer