Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
siliconcanals

ShinyHunters breached more than 100 organisations through a PeopleSoft flaw before Oracle issued an advisory, and the reason two-thirds were universities says everything about ...

The story of the latest ShinyHunters campaign is not really about a bug in Oracle PeopleSoft. The story of the latest ShinyHunters campaign is not really about a bug in Oracle PeopleSoft. It is about ...
Infosecurity-magazine.com

Fake Software Tutorials on TikTok Spread Vidar Stealer

Threat actors have been using short-form videos on TikTok and Instagram Reels to push the Vidar infostealer, disguising the attacks as tutorials for unlocking premium software for free. New analysis ...