Category: TheHackerNews

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials
29
Dec
2025

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

Cybersecurity researchers have disclosed details of what has been described as a “sustained and targeted” spear-phishing campaign that has published…

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
29
Dec
2025

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors

In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining….

MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
29
Dec
2025

MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide

Dec 29, 2026Ravie LakshmananDatabase Security / Vulnerability A recently disclosed security vulnerability in MongoDB has come under active exploitation in…

MongoDB Flaw
27
Dec
2025

New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory

Dec 27, 2025Ravie LakshmananDatabase Security / Vulnerability A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated…

Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code
26
Dec
2025

Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code

Dec 26, 2025Ravie LakshmananCryptocurrency / Incident Response Trust Wallet is urging users to update its Google Chrome extension to the…

China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
26
Dec
2025

China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware

A China-linked advanced persistent threat (APT) group has been attributed to a highly-targeted cyber espionage campaign in which the adversary…

Critical LangChain Core Vulnerability
26
Dec
2025

Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection

Dec 26, 2025Ravie LakshmananAI Security / DevSecOps A critical security flaw has been disclosed in LangChain Core that could be…

LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
25
Dec
2025

LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds

Dec 25, 2025Ravie LakshmananData Breach / Financial Crime The encrypted vault backups stolen from the 2022 LastPass data breach have…

Digiever NVR Vulnerability
25
Dec
2025

CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

Dec 25, 2025Ravie LakshmananVulnerability / Endpoint Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting…

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
25
Dec
2025

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

Dec 25, 2025Ravie LakshmananVulnerability / Enterprise Security Fortinet on Wednesday said it observed “recent abuse” of a five-year-old security flaw…

MacSync macOS Stealer
24
Dec
2025

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

Dec 24, 2025Ravie LakshmananMalware / Endpoint Security Cybersecurity researchers have discovered a new variant of a macOS information stealer called…

Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media
24
Dec
2025

Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media

Dec 24, 2025Ravie LakshmananOnline Fraud / Artificial Intelligence The fraudulent investment scheme known as Nomani has witnessed an increase by…