Cloud security teams have traditionally focused on preventing attackers from getting into their environments. Firewalls, web … AWS Warns Unmonitored Outbound Traffic Is Becoming a Major Cloud Security RiskRead more
data exfiltration
Malicious Chrome Extensions Caught Stealing AI Chat Data
A growing threat involving malicious Chrome extensions is putting millions of users at risk by silently … Malicious Chrome Extensions Caught Stealing AI Chat DataRead more
Hackers Use ‘Underminr’ to Bypass DNS Security via CDNs
Cybersecurity researchers have uncovered a sophisticated technique that allows attackers to bypass protective DNS filtering by … Hackers Use ‘Underminr’ to Bypass DNS Security via CDNsRead more
NYC Hospital Breach Exposes 1.8M Patients’ Fingerprints
New York City’s largest public hospital system is notifying 1.8 million patients after a cyber intrusion … NYC Hospital Breach Exposes 1.8M Patients’ FingerprintsRead more
Vimeo Data Breach Exposes Email Addresses of 119,000 Users
Vimeo has confirmed a data breach that exposed approximately 119,200 unique user email addresses, and in … Vimeo Data Breach Exposes Email Addresses of 119,000 UsersRead more
Critical Warning: Popular “Lightning” AI Framework Hacked in Massive Supply Chain Attack
On April 30, 2026, the Socket Research Team issued an emergency alert: the widely used PyPI … Critical Warning: Popular “Lightning” AI Framework Hacked in Massive Supply Chain AttackRead more
Ollama Model Upload Vulnerability (CVE-2026-5757)
As organizations rush to deploy local AI models, a critical security gap is emerging—one that could … Ollama Model Upload Vulnerability (CVE-2026-5757)Read more
The Pastebin Pivot: How a Simple PowerShell Script Hijacks Telegram Sessions
In the world of cybercrime, sophistication isn’t always a requirement for success. Sometimes, all it takes … The Pastebin Pivot: How a Simple PowerShell Script Hijacks Telegram SessionsRead more
npm Supply Chain Attack: Hugging Face Malware Abuse Explained
The npm supply chain attack targeting the malicious package js-logger-pack demonstrates a dangerous evolution in modern … npm Supply Chain Attack: Hugging Face Malware Abuse ExplainedRead more
StealTok Campaign Turns TikTok Extensions into Spyware
Browser extensions are often trusted by default—but that trust is exactly what attackers are now exploiting. … StealTok Campaign Turns TikTok Extensions into SpywareRead more