Malware & Ransomware
Shai-Hulud worm targets AI infrastructure via compromised Tensorlake npm package
The Shai-Hulud credential-stealing worm has expanded its reach to AI tools by hijacking the Tensorlake package on the npm registry.
credential theft
Everything Threat Times has reported about credential theft: 5 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Nikkei confirms two employee cloud accounts compromised, used to send mass phishing
The Japanese media giant disclosed unauthorized access to staff accounts, with one leveraged to distribute thousands of phishing messages.
Cyber Attacks
Attackers Use Comp GitHub Maintainer Accounts to Seed Credential Theft Workflows
Researchers reveal a campaign using stolen maintainer credentials to inject malicious GitHub Actions into hundreds of open-source repositories.
Cyber Attacks
ASOS attributes recent data breach to social engineering and credential theft
Online retailer ASOS confirms attackers used social engineering to steal credentials and access customer personal data in a recent incident.
Cyber Attacks
ASOS Confirms Data Breach After Attackers Compromise Simon AI Platform Credentials
Attackers exploited stolen employee credentials to breach ASOS via the Simon AI marketing platform, confirming a significant security incident.