
Fake Firefox Wallet Extensions Target Rabby and OKX Recovery Secrets
Report says 16 fake Firefox extensions posed as Rabby and OKX wallets to intercept recovery phrases during import for attacker transmission.

Report says 16 fake Firefox extensions posed as Rabby and OKX wallets to intercept recovery phrases during import for attacker transmission.

Reported Oracle Health breach on legacy Cerner server may affect nearly 20 million people, potentially exposing names, SSNs and clinical data.

DNS changes in .gh, .sl, .as led to unauthorized Google and YouTube certificates. Google says no breach of its systems, misuse unconfirmed.

LMCache distributed mode can allow unauthenticated code execution via unsafe pickle deserialization on ZeroMQ port when bound beyond localhost.

Sources allege ShinyHunters operator Rey sought to extort Jeppesen ForeFlight as Boeing reviews claims; detention and data theft remain unconfirmed.

Black Lotus Labs says PoeLLM malware compromised over 2,100 exposed servers for mining, remote shell access and scanning.

Researchers saw honeypot probing within hours of public PoC release for an unauthenticated file-access flaw affecting eight Atlassian self-hosted products.

Reported transfer of suspected Qilin member from Japan to Germany over alleged logistics attack, with context on RaaS model and claimed incidents.

U.S. authorities warn FortiBleed remains active against exposed FortiGate firewalls and SSL VPNs, using stolen credentials for persistent network access.