⤷ Title: Single Actor Bypassed Open VSX Security with “Disposable” Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 01:01:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 #Cyber Attribution #infosec #Malicious Extensions #malware #Open VSX #String_Fragment Reconstruction #supply chain attack #VS Code Extensions #Yeeth Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 01:01:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 #Cyber Attribution #infosec #Malicious Extensions #malware #Open VSX #String_Fragment Reconstruction #supply chain attack #VS Code Extensions #Yeeth Security
Daily CyberSecurity
Single Actor Bypassed Open VSX Security with "Disposable" Tools
Yeeth Security uncovers a sophisticated Open VSX campaign using string-fragment reconstruction to hide malware. 16 malicious extensions identified.
⤷ Title: The Ghost in the API: Attackers Hijack 700+ Ghost CMS Sites Using AI-Discovered SQL Flaw
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 03:58:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin API key exfiltration #Anthropic Claude vulnerability discovery #ClickFix fake CAPTCHA attacks Ghost CMS #Ghost CMS CVE_2026_26980 exploitation #Ghost Content API blind SQLi #malicious JavaScript loader #QiAnXin XLab threat intelligence #web.telegram.ug C2 malware #website poisoning campaign #Windows Run dialog exploit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 03:58:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin API key exfiltration #Anthropic Claude vulnerability discovery #ClickFix fake CAPTCHA attacks Ghost CMS #Ghost CMS CVE_2026_26980 exploitation #Ghost Content API blind SQLi #malicious JavaScript loader #QiAnXin XLab threat intelligence #web.telegram.ug C2 malware #website poisoning campaign #Windows Run dialog exploit
Information Security News
The Ghost in the API: Attackers Hijack 700+ Ghost CMS Sites Using AI-Discovered SQL Flaw - Information Security News
Hackers are actively exploiting a critical Ghost CMS SQL flaw (CVE-2026-26980) to hijack 700+ websites and serve fake Cloudflare ClickFix malware overlays.
⤷ Title: Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:22:23 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ClickFix #CVE_2026_26980 #cybersecurity news #FakeCaptcha #Ghost CMS #malicious JavaScript #sql injection #XLab
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:22:23 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #ClickFix #CVE_2026_26980 #cybersecurity news #FakeCaptcha #Ghost CMS #malicious JavaScript #sql injection #XLab
Daily CyberSecurity
Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs
XLab uncovers a massive Ghost CMS poisoning campaign utilizing CVE-2026-26980 to launch FakeCaptcha attacks. Learn how to secure your site.
⤷ Title: Architectural Vulnerabilities in Notepad++: Arbitrary Code Execution Risks Unmasked
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
Information Security News
Notepad++ Config.xml Code Execution Flaw Patched: Update Now
Notepad++ patches a critical config.xml code execution flaw (CVE-2026-48778) alongside two other security bugs. Upgrade to version 8.9.6.1 immediately.
⤷ Title: The Algorithmic Illusion: Threat Actors Weaponize Generative AI Shared Tunnels for Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:14:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ad_blocking extension endpoint defense #ChatGPT Canvas phishing campaign #Claude.ai shared conversation exploit #ClickFix terminal command lure #Google Ads malware distribution #MacSync infostealer deployment #malicious browser search redirection #Shared AI chat malvertising #trusted domain signature spoofing #user generated content safety bounds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:14:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ad_blocking extension endpoint defense #ChatGPT Canvas phishing campaign #Claude.ai shared conversation exploit #ClickFix terminal command lure #Google Ads malware distribution #MacSync infostealer deployment #malicious browser search redirection #Shared AI chat malvertising #trusted domain signature spoofing #user generated content safety bounds
Information Security News
Shared AI Chat Malvertising: Fraudsters Weaponize ChatGPT & Claude
Hackers are deploying shared AI chat malvertising in Google Ads, exploiting trusted chatgpt.com and claude.ai links to infect users with malware.
⤷ Title: Supply Chain Sabotage: The Infiltration of the npm Registry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 02:22:39 +0000
════════════════════════
⌗ Tags: #Malware #AWS credential theft #Bun runtime malware #malicious npm packages #Microsoft Threat Intelligence #typosquatting supply chain attack #vpmdhaj repository exploit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 02:22:39 +0000
════════════════════════
⌗ Tags: #Malware #AWS credential theft #Bun runtime malware #malicious npm packages #Microsoft Threat Intelligence #typosquatting supply chain attack #vpmdhaj repository exploit
⤷ Title: The Compromised Registry: One in Five New Domains Serves Cybercrime
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 04:03:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #disposable cyber infrastructure #FUNNULL threat syndicate #generic top_level domains #Interisle consulting report #loan domain fraud #malicious domain registrations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 04:03:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #disposable cyber infrastructure #FUNNULL threat syndicate #generic top_level domains #Interisle consulting report #loan domain fraud #malicious domain registrations
Information Security News
Malicious Domain Registrations: Interisle Report
Analyze the latest metrics on malicious domain registrations. Discover how cybercriminals exploit generic top-level domains to scale their fraud networks.
⤷ Title: Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 06:20:43 +0000
════════════════════════
⌗ Tags: #Data Leak #Malware #Browser Extensions #ChatGPT Security #Claude #code_injection #data exfiltration #google chrome #Infosec Report #Malicious AI Extensions
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 06:20:43 +0000
════════════════════════
⌗ Tags: #Data Leak #Malware #Browser Extensions #ChatGPT Security #Claude #code_injection #data exfiltration #google chrome #Infosec Report #Malicious AI Extensions
Daily CyberSecurity
Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
The Dangerous Scope of Browser Data Exfiltration Artificial Intelligence has rapidly transformed how we work and communicate every single day. Therefore, millions of professionals now rely on auto…
⤷ Title: OXLOADER Malware Loader Spreads CASTLESTEALER via Fake Node.js Ads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:16:06 +0000
════════════════════════
⌗ Tags: #Malware #CASTLESTEALER #Elastic Security Labs #Infostealer #malicious Google Ads #Malvertising #malware loader #OXLOADER #REF8372
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:16:06 +0000
════════════════════════
⌗ Tags: #Malware #CASTLESTEALER #Elastic Security Labs #Infostealer #malicious Google Ads #Malvertising #malware loader #OXLOADER #REF8372
Daily CyberSecurity
OXLOADER Malware Loader Spreads CASTLESTEALER via Fake Node.js Ads
The OXLOADER malware loader spreads via malicious Google Ads, dropping the CASTLESTEALER infostealer with heavy obfuscation and anti-VM checks.
⤷ Title: Eastern Europe C2 Servers: How Hunt.io Mapped 3,900 Malicious Nodes
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 06:59:15 +0000
════════════════════════
⌗ Tags: #Malware #C2 servers #Cobalt Strike #Eastern Europe #Friendhosting #Malicious Infrastructure #threat intelligence
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 06:59:15 +0000
════════════════════════
⌗ Tags: #Malware #C2 servers #Cobalt Strike #Eastern Europe #Friendhosting #Malicious Infrastructure #threat intelligence
Information Security News
Eastern Europe C2 Servers: How Hunt.io Mapped 3,900 Malicious Nodes
Cyberattack infrastructure often outlives the domains and IP addresses it depends on. Indeed, a new report from Hunt.io reveals just how densely such nodes have clustered across Eastern Europe. Fr…