Tag: password
-
Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques
Tags: ai, attack, blockchain, cyberattack, cybersecurity, data, email, password, security-incident, threat, toolChainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics firm Chainalysis says it was the target of a cybersecurity incident. A threat actor accessed its systems and internal tools and stole some non-sensitive customer data. >>This month, Chainalysis detected an external actor using offensive…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim’s stolen data by their monetization value.Like other typical stealer families, VOLTA is equipped to harvest passwords and cookies from Chromium-based web browsers; data from Outlook profiles and Slack workspaces;…
-
Alpine Linux rebuilds GitLab after attempted RCE attack
Tags: attack, exploit, gitlab, hacker, infrastructure, linux, open-source, password, rce, remote-code-execution, vulnerabilityHackers attempted to exploit a critical GitLab vulnerability in Alpine Linux’s development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/alpine-linux-rebuilds-gitlab-after-attempted-rce-attack/
-
Applebee’s exposed customers’ personal data after leaving database password in app
EXCLUSIVE: A security researcher discovered the hardcoded credential in Applebee’s app, allowing unrestricted access to customers’ personal data. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/30/applebees-exposed-customers-personal-data-after-leaving-database-password-in-app/
-
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn’t.There’s a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using…
-
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/robot-malware-indian-bank-customers/
-
FortiBleed 2.0 Exposes 40,573 FortiGate Secrets Across 975 Previously Unlisted Domains
Hudson Rock’s FortiBleed 2.0 investigation found 40,573 records with cleartext secrets in FortiGate configuration reports, exposing passwords and service credentials that could help attackers move beyond the firewall. Published on October 27, 2026, the research also identifies 975 domain labels missing from the earlier FortiBleed dataset. These labels do not represent 975 newly confirmed company…
-
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Tags: breach, communications, credentials, credit-card, cyber, data, data-breach, email, Internet, network, passwordSony Network Communications disclosed a data breach that exposed 2,585,481 customer records linked to its So-net and Plala (S Course) internet services. The breach, announced on October 27, 2026, compromised passwords for 54,401 email addresses. However, it did not affect primary membership passwords or credit card information. The compromised database contained 2,141,986 records from So-net…
-
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Tags: breach, communications, credentials, credit-card, cyber, data, data-breach, email, Internet, network, passwordSony Network Communications disclosed a data breach that exposed 2,585,481 customer records linked to its So-net and Plala (S Course) internet services. The breach, announced on October 27, 2026, compromised passwords for 54,401 email addresses. However, it did not affect primary membership passwords or credit card information. The compromised database contained 2,141,986 records from So-net…
-
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records… First seen on hackread.com Jump to article: hackread.com/fake-us-court-notices-target-businesses-lodarat/
-
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records… First seen on hackread.com Jump to article: hackread.com/fake-us-court-notices-target-businesses-lodarat/
-
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
Fake US court notices target over 100,000 businesses, luring recipients to download LodaRAT malware that steals passwords, records… First seen on hackread.com Jump to article: hackread.com/fake-us-court-notices-target-businesses-lodarat/
-
Bank of America kindly asks that you don’t share your banking password with your AI assistant
The banking giant reminds customers that “you’re responsible for activity” resulting from your AI agents’ access. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/27/bank-of-america-kindly-asks-that-you-dont-share-your-banking-password-with-your-ai-assistant/
-
New Sirius Backdoor Hides Inside Windows Processes to Steal Passwords and Evade Detection
A previously undocumented Sirius backdoor variant during a priority customer investigation, revealing a multistage campaign that hides malicious code inside legitimate Windows processes. The supplied analysis details stealthy remote access and persistence, although it does not establish specific password extraction capabilities. The financial urgency and regional tailoring reflect established phishing techniques that exploit trust in…
-
DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail services. The company restored its browser-based File Manager on October 26, 2026. However, users affected by the incident must obtain new login credentials from their account owners before they can access their accounts.…
-
DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail services. The company restored its browser-based File Manager on October 26, 2026. However, users affected by the incident must obtain new login credentials from their account owners before they can access their accounts.…
-
DreamHost incident triggers password resets, locks customers out of email and FTP accounts
DreamHost has brought its File Manager back online after an incident that disrupted several of its services, though some of its customers still can’t get into their … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/dreamhost-incident-email-ftp-password-resets/
-
Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords
Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’ passwords. Huntress recorded 497 successful sign-ins and more than 200,000 failed attempts during the ten-week campaign, which ran from July 14 through September 22, 2026. Use of the provider’s network does not establish its involvement…
-
DreamHost forces password resets in ongoing “incident”
DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dreamhost-forces-email-ftp-sftp-password-resets-in-ongoing-incident/
-
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware platform that hides inside repackaged legitimate apps, targeting messaging services and mobile wallets. Its YingGai framework can intercept one-time passwords, steal account and chat data, collect contacts, manipulate sessions and spoof…
-
Hackers Turn Mac Password Stealer Into RAT That Survives Reboots and Executes Remote Commands
The Icarus macOS stealer, marketed as ICMacOS, has moved beyond smash-and-grab theft. Its latest version installs persistence, keeps a live channel open to its operators, and executes commands sent from a remote server. SOCRadar identified ICMacOS in September 2026 and found two variants. Version 1 focuses on core theft, targeting browser credentials, password manager databases,…
-
KeePassXC 2.8.0 Released to Fix Multiple Security Vulnerabilities Affecting Password Manager
KeePassXC has released version 2.8.0 to address multiple security vulnerabilities related to database imports, browser integration, SSH key handling, and the protection of sensitive information. Published on October 21, this update includes eight security fixes, platform improvements, and a migration to Qt 6. Notably, one vulnerability is identified as CVE-2026-69150, and four additional issues are…
-
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers’ own container app.The…
-
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619.”In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multi-factor First seen on…
-
Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware
Hackers are distributing ArmorSteal, a Python-based malware family, through fake Chocolatey and Microsoft Activation-Script websites promoted via search engine poisoning. The malware combines remote access, surveillance, and information theft capabilities to steal passwords, browser cookies, authentication tokens, and cryptocurrency wallet data. Zscaler’s Threat Hunting team identified the campaign in September 2026 and published its findings…
-
Infostealer riding the AI Train
ey Points Introduction Infostealers commonly target browser passwords, session cookies, and cryptocurrency wallets. This malware combines those established capabilities with dedicated collection routines for AI applications and development tools. Its targets include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, and GitHub Copilot, alongside cloud credentials and sensitive files from local development environments. This expanded targeting reflects…