Microsoft

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths

Teams support impersonation led to remote access, malicious runtime execution, and Certificate Services abuse through ...

Hugging Face malware campaign returns to hijack GPUs for crypto mining

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...
news.lavx.hu

Hackers Exploited Cisco SD-WAN Flaw to Steal Encryption Keys with Custom Malware

Cisco Talos revealed that attackers exploited a critical authentication bypass in Catalyst SD-WAN controllers to deploy ...
HackerNoon

Poetry vs uv: Choosing a Python Package Manager

Poetry vs uv compared: speed benchmarks, lockfiles, cache commands and why uv sync --locked matters in CI, plus a ...
cyberpress

Hacker Exploits Critical PHP2Shell Flaws to Steal Bitcoin, Releases Public PoC

A researcher using the GitHub handle KillaBoi has published a Python proof of concept for the Steal My Bitcoin ...
cyberpress

Hackers Use Fake Chocolatey Websites to Spread New ArmorSteal Password-Stealing Malware

Hackers are using fake Chocolatey and Microsoft Activation Scripts websites to distribute ArmorSteal, a Python-based malware family that can steal passwords, cryptocurrency wallets, browser cookies, ...