security

February 2026: ShinyHunters Attacks Hit Odido, CarGurus, Panera Bread, and FigureFebruary 2026 brought a fresh wave of data breach disclosures, and the pattern was hard to miss. Extortion-driven attacks continued to spread across consumer brands, ecommerce platforms, telecom providers, and even government systems, often by exploiting identity access, support tools, or third-party relationships.Several of the […]

Identity Threat Intelligence Report: How Infostealer Malware Is Reshaping Cyber Risk?The network edge used to be the thing worth defending. Organizations built their security around it. Then came cloud, SaaS, and remote work, and the idea of a defined boundary quietly stopped being true.What replaced it was Identity. Every corporate resource, from email to infrastructure […]

In Teil zwei erzählt uns der vietnamesische Hacker, wie er zum Datenhändler wurde und dann für das falsche Verbrechen im Gefängnis gelandet ist.

Claude Code Leak: What You Need to Know On March 31, 2026, community reports drew attention to a source map exposure involving Anthropic’s Claude Code CLI after users found that the npm package appeared to include a JavaScript source map file, cli.js.map, alongside the distributed build. This is not the same as a confirmed breach of […]

AI agent risk isn’t equal, it scales with access to systems and level of autonomy. Token Security explains how CISOs should categorize agents and prioritize what to secure first. […]

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. […]

Iranian APTs are blurring the lines between state-sponsored and cybercriminal activities to target high-impact US organizations.

Der Quellcode von Anthropics CLI-Tool Claude Code wurde versehentlich über eine Source-Map im npm-Registry öffentlich zugänglich.

Entfernungsanordnungen für terroristische Inhalte werden wieder seltener – die Zahl der BKA-Hinweise an Hostinganbieter steigt dennoch rapide an.

IT-Forscher haben eine vermeintlich kritische Zero-Click-Schwachstelle in Telegram ausgemacht. Telegram widerspricht dem.