News that matters, without the noise.

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma,

China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor

A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called

Critical python.org Vulnerability Allowed Attackers to Forge Admin-Level API Requests

A critical authentication bypass vulnerability in the python.org release management API could have allowed attackers to impersonate administrators,

New AI models, token minimization and IBM’s new sub-1nm chip

Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant

An active phishing campaign has been targeting hotel and other hospitality organizations across Europe and Asia since April

KuinaExtractor Uses Telegram Exfiltration, UAC Bypass, and Sandbox Detection for Stealth

A newly uncovered infostealer called KuinaExtractor has been quietly evolving for over six months, posing a serious and

$3 Million Reportedly Stolen in Polymarket Hack

The decentralized prediction market said hackers targeted some of its users through a compromise of a third-party vendor.

Russia Used Cellebrite on Jailed Activist’s iPhone Months After Sales Cutoff

Russian authorities used Cellebrite’s UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov

Takepoint Signals | OT Security Hasn’t Arrived Yet

This is a special edition of Takepoint Signals. It will ruffle a few feathers.

CL-STA-1062 Hackers Use TinyRCT Backdoor to Target Southeast Asian Governments

A Chinese-speaking threat group known as CL-STA-1062 has been running a quiet but aggressive campaign against government agencies

Miasma Malware Uses binding.gyp and Bun to Execute Hidden Payloads in npm Packages

Supply chain attackers are getting more creative, and the latest threat is proof of that. A malware campaign

Minecraft Malware Loader Uses RSA-Signed Smart Contract Updates for Persistent C2

A new and highly sophisticated malware loader has been found hiding inside what appears to be a harmless