noname 🥸 (n3rd)

• 1 reply
• 0 recasts
• 2 reactions

Google’s OAuth login exposes a critical vulnerability, allowing attackers to access old employee accounts simply by purchasing a defunct domain from a failed startup. Learn how this vulnerability could affect your organization: https://thehackernews.com/2025/01/google-oauth-vulnerability-exposes.html

• 0 replies
• 0 recasts
• 0 reactions

🔒 Critical Alert: Malicious npm packages are impersonating Hardhat tools to steal private keys and mnemonics. ↪ Over 1,000 downloads of a single fake package, active for over a year. ↪ Data is exfiltrated using hardcoded Ethereum addresses. Open-source dependency complexity is a hacker’s dream—manual reviews are becoming impossible. 🔧 What You Can Do: ✅ Double-check every dependency. ✅ Use tools to audit npm packages. ✅ Build robust supply chain defenses. 🔗 Read the details: https://thehackernews.com/2025/01/russian-speaking-attackers-target.html

• 0 replies
• 1 recast
• 0 reactions

🚨 Russian cyber attackers are actively targeting Kazakhstan’s Ministry of Foreign Affairs—this isn't just a cyber attack; it’s an espionage campaign to steal sensitive political and economic data. The attackers use infected Microsoft Office docs to bypass security and deploy powerful malware like HATVIBE—designed to remain undetected. Learn more: https://thehackernews.com/2025/01/russian-linked-hackers-target.html

• 0 replies
• 0 recasts
• 0 reactions