Mobile Security & Privacy Major Supply Chain Attack Exploits Compromised ConnectWise Cloud Backup Credentials to Target Microsoft 365 Environments October 18, 2026 rifanmuazin Cybersecurity researchers are sounding the alarm over an active and sophisticated supply chain campaign in which unknown threat actors have abused compromised Microsoft 365 credentials belonging to ConnectWise Cloud Backup,…
Mobile Security & Privacy GitLab’s Project Email Feature Exposes Account Credentials, Enabling Unauthorized Code Commits and CI/CD Execution September 24, 2026 Iffa Jayyana Security researchers have uncovered a significant security implication involving GitLab’s built-in feature for filing issues via email. According to findings published by cloud security firm Aikido Security, the private email…
Mobile Security & Privacy Malicious ‘sckit’ Worm Targets MemTensor Packages on npm and PyPI to Harvest Developer Credentials September 23, 2026 Lina Irawan Unknown threat actors have successfully compromised legitimate MemTensor packages across both the npm and Python Package Index (PyPI) software repositories in a sophisticated supply chain attack. The compromised libraries are…
Mobile Security & Privacy Sophisticated Cyberattack Weaponizes Fake LastPass Authenticator to Blind Windows Security and Steal Credentials September 21, 2026 Azzam Bilal Chamdy Security researchers from LastPass and Delphos Labs have uncovered a sophisticated malware campaign that uses a fraudulent LastPass Authenticator installer hosted on GitHub to disable endpoint security software and deploy…
Mobile Security & Privacy Cybersecurity Researchers Warn of Mass-Scanning Campaign Targeting Exposed Vite Development Servers to Harvest Cloud Credentials September 12, 2026 Evan Lee Salim Cybersecurity researchers have issued a widespread warning regarding an ongoing mass-scanning campaign actively targeting internet-exposed Vite development servers to siphon sensitive data, cloud credentials, and vital infrastructure configurations. According to…
