Faeem @2fast4uposts - Tumblr Blog

Fake Sites Open‑Source Deliver Malware via TDS

Overview Cybersecurity researchers have uncovered a large‑scale impersonation campaign exploiting the popularity of open‑source and freeware projects to distribute malware through a Traffic Distribution System (TDS). The operation uses well‑designed fake websites that appear legitimate, often referencing real project resources, to deceive users seeking trusted tools. Attack Mechanism The…

#Fake Sites Open‑Source Deliver Malware via TDS

What FortiGate Actually Does?

Overview In today’s hyper‑connected enterprise environment, FortiGate stands as one of the most comprehensive Next‑Generation Firewall (NGFW) platforms, integrating security, networking, connectivity, and visibility into a single unified system. The attached architecture diagram illustrates how FortiGate operates as the central traffic decision and enforcement point, protecting organizations from…

#What FortiGate Actually Does

Hola Browser for Windows Compromised

Overview A recent supply‑chain compromise has impacted the Windows version of Hola Browser, delivering an undeclared executable identified as a cryptocurrency miner. The breach was discovered during AppEsteem’s certification testing, which Hola Browser had previously passed. Hola, an Israeli company best known for Hola VPN, integrates VPN and proxy functionality directly into its Chromium‑based…

#Hola Browser for Windows Compromised

Weaponized ChatGPT

Overview A new malvertising campaign is exploiting ChatGPT’s global popularity by promoting a weaponized fake download site through sponsored search results, delivering malware to both Windows and macOS users. Researchers from Evalian’s SOC team uncovered the operation, which uses convincing OpenAI branding and search engine ads to lure users actively seeking legitimate AI tools. The malicious…

#Weaponized ChatGPT

Hackers Deploy New Atlas RAT in European Cyberattacks

Overview A Chinese‑speaking cybercrime group, tracked as TA4922, has expanded its operations beyond East Asia, launching financially motivated attacks across Germany, Italy, the United Kingdom, and South Africa. The group’s latest campaigns feature previously undocumented malware, including the Atlas RAT backdoor, alongside custom loaders that demonstrate…

Fake Chrome Web Store to Steal Google Credentials

Overview A sophisticated phishing campaign is targeting Chrome extension developers using fake copyright removal notices that mimic official messages from the Chrome Web Store. The scam tricks developers into entering their Google credentials on a counterfeit sign‑in page, putting both their accounts and their users at serious risk. Researchers at Malwarebytes documented the campaign, warning…

#Fake Chrome Web Store to Steal Google Credentials

Acer Zero‑Day in Wave 7 Routers

Overview Acer has confirmed it is actively developing fixes for two maximum‑severity zero‑day vulnerabilities affecting its Wave 7 mesh routers. Reported by security researcher Gergo Pap, these flaws impact devices running firmware version T7c_GBL_1.01.000055 or earlier, exposing users to remote credential theft and persistent backdoor injection. Vulnerability Details The two vulnerabilities —…

Unpatched Windows Search URI Vulnerability

Overview Cybersecurity researchers at Huntress have uncovered an unpatched Windows vulnerability that exposes users’ NTLMv2 hashes through the search: URI handler, echoing the same flaw previously seen in CVE‑2026‑33829 affecting the Windows Snipping Tool. This newly discovered issue allows attackers to steal authentication hashes simply by tricking victims into clicking a malicious link,…

Microsoft 365 Android Apps Account Takeover

Overview A critical flaw dubbed FlagLeft exposed billions of Android users to silent Microsoft account token theft across six major Microsoft 365 apps — Word, PowerPoint, Excel, Copilot, Loop, and OneNote. Researchers at Enclave and Ofek Levin discovered that a single forgotten debug flag left active in production (setIsDebugMode(true)) disabled the authorization gate that normally restricts…

#Microsoft 365 Android Apps Account Takeover

Hackers Steal GitHub Tokens in One Click using VSCode

Overview A newly disclosed zero‑day vulnerability in Visual Studio Code (VS Code) has exposed developers to a serious GitHub token theft risk. Security researcher Ammar Askar released exploit code demonstrating how attackers can steal GitHub OAuth tokens by tricking users into clicking a malicious link — a flaw that remains unpatched and without a CVE ID. Microsoft defines a zero‑day as a flaw…

Afghanistan Finance Ministry Targeted with Xeno RAT

Overview A new cyber‑espionage campaign, codenamed Operation XENOFISCAL, has been uncovered targeting Afghanistan’s Ministry of Finance and provincial revenue directorates. The campaign is attributed to the Pakistan‑aligned SideCopy group, a sub‑cluster of Transparent Tribe (APT36), known for its persistent targeting of South Asian government and defense entities. Researchers at Seqrite Labs…

ClickFix and FakeUpdate Attacks

Overview A large‑scale malware distribution campaign led by a threat actor known as DriveSurge has compromised thousands of websites, redirecting unsuspecting visitors to malware‑delivery infrastructure. According to SilentPush Labs, the campaign leverages two social‑engineering techniques — ClickFix and FakeUpdates — to infect systems and harvest credentials. DriveSurge operates as an…

#ClickFix and FakeUpdate Attacks

Red Hat npm Packages Compromised

Overview A major supply‑chain compromise has struck Red Hat’s @redhat‑cloud‑services namespace on npm, with over 30 packages backdoored to distribute a new variant of the Shai‑Hulud credential‑stealing malware, now dubbed Miasma. Security firms Aikido and OX Security discovered the breach, identifying 32 packages and 96 versions infected with malicious code designed to harvest developer…

Operation Dragon Weave Targets Czech Republic & Taiwan

Overview A newly uncovered cyber‑espionage campaign, Operation Dragon Weave, has been observed targeting government, research, academic, technology, and financial sectors in the Czech Republic and Taiwan. According to Seqrite Labs, the operation delivers a Rust‑based AdaptixC2 agent through sophisticated spear‑phishing attacks, marking a significant escalation in China‑aligned threat activity…

#Operation Dragon Weave Targets Czech Republic & Taiwan

Microsoft Investigates MFA Setup Failure

Overview Microsoft is investigating a service disruption affecting users attempting to set up multi‑factor authentication (MFA) or access the My Sign‑Ins portal at mysignins.microsoft.com. The issue was officially acknowledged by the Microsoft 365 Status account on X (formerly Twitter) on June 1, 2026, under incident tracking code MO1329260. The company stated: “We’re investigating an issue…

#Microsoft Investigates MFA Setup Failure

WP Bug Exploited to Create Admin Accounts on WordPress Sites

Overview A critical vulnerability, CVE‑2026‑8732, has been discovered in the WP Maps Pro plugin — a premium WordPress tool used for building interactive maps and store locators. The flaw allows unauthenticated attackers to create rogue administrator accounts, giving them full control over affected websites. Security researcher David Brown identified the issue, which impacts…

#WP Bug Exploited to Create Admin Accounts on WordPress Sites

ChatGPT Share Links Abused to Host Fake Outage Pages Delivering Malware

Overview Researchers at Push Security have uncovered a new campaign dubbed LLMShare, where threat actors exploit ChatGPT’s content‑sharing feature to host fake outage pages that trick users into downloading malware disguised as the ChatGPT desktop application. By abusing legitimate chatgpt.com/s/ shared links, attackers deliver phishing payloads directly through OpenAI’s trusted domain —…

Trending Blogs

Recently Viewed Blogs

Faeem