cyberpress

Trojanized Terraform Provider Delivers Cross-Platform Malware to Steal Developer Credentials

Zscaler ThreatLabz has uncovered a July 2026 campaign that hides malware in a trojanized Terraform provider. It targets ...
Security Boulevard

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor ...
The Hacker News

âš¡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

M crypto hack, active Citrix exploits, AI agents going off-script, phishing takedowns, ransomware, and key CVEs.
BleepingComputer

Check Point warns of Management Server zero-day exploited in attacks

Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. The Security Management Server is a ...
trmlabs

Fake AI Trading Bots Are Getting Victims to Build Their Own Drainers

YouTube tutorials promising a Claude-built crypto arbitrage bot walk viewers step by step into deploying a smart contract that contains no trading logic and instead forwards any cryptocurrency they ...
cybersecuritynews

Kimsuky Hackers Use OpenCode AI Agent to Mass-Produce Phishing Decoys in LNK Attacks

Kimsuky has been observed using an AI agent to produce convincing phishing decoys at scale, then hiding malware inside Windows shortcut files. The latest activity shows how ordinary-looking documents ...
comingsoon

Avengers: Doomsday Directors Address Why Movie’s Script Wasn’t Done When Filming Began

Avengers: Doomsday’s script took a long time to take shape. The movie’s directors, the Russo Brothers, have confirmed that they began production with a screenplay that was far from complete. In a ...
Politico

‘We will always respect the role of the judiciary’: Blanche flips the script in DOJ address

Newly confirmed Attorney General Todd Blanche’s 19-minute address to the Justice Department’s workforce Thursday was striking more for what he didn’t say than what he did. There were no strident ...
teiss

Adform ad-tech script hijacked to swap cryptocurrency wallet addresses

A tampered tracking file served across thousands of websites rewrote copied and typed crypto addresses for at least a day before the ad company caught it. Adform, a Denmark-based advertising ...
CoinDesk

Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million

A vulnerability in a March 2021 Coldcard firmware release has enabled attackers to systematically drain bitcoin from thousands of wallets by reproducing keys generated with weak software-based ...
The Hacker News

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on ...