1+ day, 6+ hour ago   (481+ words) A newly disclosed universal deserialization gadget chain demonstrates that a single unsafe Marshal.load operation can lead to remote command execution on Ruby 4.0.6. The chain reportedly also works unchanged on Ruby versions as far back as 3.3, renewing concerns that Ruby’s…...

1+ day, 5+ hour ago   (459+ words) Microsoft is consolidating its consumer and productivity-focused AI experiences through a major update to the Copilot app, combining chat histories and content for personal users while retiring several high-profile features, including Podcasts, Deep Research, and Group Chat. The changes arrive…...

2+ day, 2+ hour ago   (359+ words) The attack ultimately hides a remote-access trojan inside a legitimate Windows-related process, helping it blend into normal endpoint activity. The campaign uses a fake legal-notice lure named “Resolución Denuncia Jurídica,” designed to exploit fear and urgency. Victims receive a phishing…...

2+ day, 5+ hour ago   (349+ words) The stolen tokens can be abused directly or fed into underground “transfer stations” that resell discounted access to expensive AI models. AI token jacking is becoming a costly risk as companies rapidly adopt large language models, automated agents, and AI-powered…...

2+ day, 3+ hour ago   (437+ words) Cybercriminals are renting services that help malware change its appearance and avoid detection. Cruciferra, a crypter-as-a-service platform linked to campaigns that used tax-themed emails to target victims, including Indian taxpayers and finance professionals. The service is not the final malware....

2+ day, 4+ hour ago   (435+ words) Hardware wallet maker Trezor has disclosed a third-party data breach affecting approximately 13,689 customers after unauthorized actors accessed systems operated by its shipping and fulfillment provider, ShipMonk. Trezor said ShipMonk notified the company of unauthorized access to systems holding customer information…...

3+ day, 1+ hour ago   (325+ words) A major software supply chain breach involving LiteLLM has reportedly exposed credentials, cloud keys, API tokens, and internal configuration data from thousands of enterprise CI/CD environments. Forensic investigations by Snyk, Trend Micro, and Cycode show that LiteLLM was not…...

3+ day, 2+ hour ago   (320+ words) Armored Likho, also known as Eagle Werewolf, has launched a new cyber-espionage campaign targeting individuals and organizations in Russia. The group used fake donation applications as bait, but its latest malware toolkit is the bigger concern. The attackers can steal…...

3+ day, 3+ hour ago   (438+ words) A new security study has found that 548 internet-exposed building automation devices near U.S. data centers are running end-of-life products that will not receive future security patches. The affected devices belong to three legacy product lines: Tridium NiagaraAX 3.x, Trane Tracer SC,…...

3+ day, 5+ hour ago   (359+ words) The malware is designed to silently collect browser credentials, saved passwords, cookies, cryptocurrency wallet data, system details, and other sensitive information from infected Windows devices. Its modular structure, flexible delivery methods, and strong focus on credential theft make it a…...