Microsoft’s open source tools were hacked to steal passwords of AI developers

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

Dashlane Reveals How Attackers Copied Encrypted Vaults In May 31 Incident

After some Dashlane users were locked out of accounts and a limited number of encrypted password vaults were downloaded, the ...

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

Dashlane Users Locked Out After Password Manager Detects Brute-Force Attack

An unknown number of Dashlane accounts were temporarily suspended after being targeted by a brute-force campaign. Some ...
The Hacker News

⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More

Your weekly cybersecurity recap: a GitHub supply chain worm, an exploited Android flaw, Instagram account takeovers, and a ...

Chinese APT deploys new malware to keep access to hacked networks

A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and ...
PCMag

Password Manager Dashlane Reveals How a Hacker Stole Encrypted Vaults

Dashlane's update about the brute-force attack reveals a notable security gap in the 'device registration' process for the ...