MalwareThe Hacker NewsNew VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueCybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data…Read on The Hacker NewsSecurity newsSecurityWeekNorthstar Security Exits Stealth With $7M to Expose Toxic Risk CombinationsThe startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues. The post Northstar Security Exits Stealth With…Read on SecurityWeekVulnerabilityThe Hacker NewsCVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyA critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker…Read on The Hacker NewsSecurity newsThe Hacker NewsHackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptMalicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced…Read on The Hacker NewsSecurity newsThe Hacker NewsFBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto HeistThe U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets from Binance to TraderTraitor, a North Korea-aligned elite…Read on The Hacker NewsMalwareThe Hacker NewsNetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET InjectionCybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week,…Read on The Hacker NewsSecurity newsThe Hacker NewsChainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity DataAmerican blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. However, the company noted that…Read on The Hacker NewsSecurity newsSecurityWeekSyrian Hacker Gets Prison Time in US After Over a Decade on the RunA US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities. The post Syrian Hacker Gets Prison Time…Read on SecurityWeekVulnerabilityThe Hacker NewsAttackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active…Read on The Hacker NewsAI securityThe Hacker NewsA Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsA malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the…Read on The Hacker NewsDDoSThe Hacker NewsCloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million…Read on The Hacker NewsMalwareDark ReadingDevs Hit by Trojanized Claude Code Extension for CursorTwo serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).Read on Dark Reading
Headlines link to the original publishers. Collected automatically and labelled by topic; INFO SHIELD is not responsible for third-party content.