Hackers Backdoor Telnyx Python SDK on PyPI to Steal Credentials Across Windows, macOS, and Linux

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor group known as TeamPCP has been caught backdooring the Telnyx Python SDK on PyPI — a popular cloud communications library with over 700,000 downloads in February alone. …

New npm Supply Chain Attack Uses undicy-http to Deploy Screen-Streaming RAT and Browser Injector

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious npm package named undicy-http has surfaced inside the Node.js developer ecosystem, quietly compromising machines of developers who mistakenly install it. The package impersonates undici, the official HTTP client library bundled with …

PNG Vulnerabilities Allow Attackers to Trigger Process Crashes, Leak Sensitive Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two high-severity vulnerabilities have been discovered in libpng, the widely used reference library for reading and writing PNG images. These flaws allow attackers to trigger process crashes, leak sensitive information, …

XLoader Malware Upgrades Obfuscation Tactics and Hides C2 Traffic Behind Decoy Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A well-known information-stealing malware called XLoader has received significant upgrades in its latest versions, making it considerably harder to detect and analyze than before. Originally derived from a malware family …

Mercor AI Confirms Data Breach Following Lapsus$ Claims of 4TB Data Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mercor AI has officially confirmed a severe data breach following claims by the notorious Lapsus$ hacking group that they stole 4 terabytes of sensitive company data. The incident, stemming from …

Hackers Weaponize Legitimate Windows Tools to Disable Antivirus Before Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomware attacks have gone far beyond simple malicious code. Today, attackers operate with the precision of a well-planned business, using trusted Windows tools to quietly tear down defenses before ransomware …

Google Unveils Ransomware Detection and File Restoration for Google Drive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has officially moved its ransomware detection and file restoration features for Google Drive into General Availability. Originally launched in beta in September 2025, the updated security controls offer organizations …

Hackers Deploy Telegram-Based ResokerRAT With Screenshot and Persistence Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new remote access trojan known as ResokerRAT has come to light, using Telegram’s bot API as its core communication channel to silently monitor and control infected Windows machines. What …

Anthropic’s Claude Code Source Code Reportedly Leaked Via Their npm Registry

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Anthropic’s proprietary Claude Code CLI tool has had its full TypeScript source code inadvertently exposed through a misconfigured npm package, after a security researcher discovered a leaked .map file referencing …