News Archives

Malicious npm Package Pretending to Be OpenClaw Installer Drops RAT, Harvests macOS Credentials

A malicious npm package impersonating an OpenClaw installer was found delivering a RAT and harvesting macOS credentials, browser data, wallets, SSH keys, Keychain entries and more.

March 10, 2026

FBI and Europol Shut Down LeakBase, a Major Market for Stolen Credentials

International law enforcement agencies including the FBI and Europol dismantled LeakBase, a large English-language clearnet forum used to trade stolen databases and stealer logs. The operation preserved user accounts, messages, payment data and IP logs and led to actions in multiple countries.

March 6, 2026

149 Hacktivist DDoS Claims Strike 110 Organizations in 16 Countries Following Middle East Military Operations

Researchers report 149 hacktivist DDoS claims against 110 organizations across 16 countries after a U.S.-Israel military operation. The surge—dominated by a handful of groups—has focused on Middle East public-sector targets and prompted warnings from security firms and national agencies.

March 5, 2026

CISA Adds VMware Aria Operations Flaw CVE-2026-22719 to KEV Catalog After Reports of Active Exploitation

CISA has added CVE-2026-22719, a high-severity command-injection bug in Broadcom VMware Aria Operations, to its Known Exploited Vulnerabilities catalog after reports of active exploitation. Patches and a workaround are available; federal agencies have a March 24, 2026 deadline to remediate.

March 4, 2026

Microsoft: OAuth Redirect Abuse Used to Deliver Malware to Government Targets

Microsoft alerts public-sector organizations about phishing campaigns that exploit OAuth redirect behavior to deliver malware. The attacks use malicious OAuth apps, crafted redirection URLs, and ZIP-based payloads that trigger PowerShell execution, DLL sideloading, and in-memory final-stage malware connecting to C2 servers.

March 3, 2026

Google: CVE-2026-21385 in Qualcomm Graphics Component Observed in Targeted Exploits

Google says a high-severity flaw (CVE-2026-21385) in an open-source Qualcomm Graphics component for Android has been observed being exploited; March 2026 patches fix 129 issues including several critical bugs.

March 3, 2026