Skip to content

Search results for «Malware»

  1. Onamae Desktop Cloud review: Security Analysis After Malware Incident

    Onamae Desktop Cloud faced unauthorized access in October 2026, with up to 26,739 servers potentially compromised. This review examines the facts and user actions.

    2 min read

  2. Cryptocurrency Wallets Security Review: OkoBot Malware Framework Analysis

    Kaspersky identified the OkoBot framework in January 2026 as a modular tool stealing cryptocurrency wallet data across 25 countries through ClickFix tactics and fake GitHub repositories.

    3 min read

  3. AI Tools Security Review Shows Malware Campaigns Targeting Claude and ChatGPT Users

    Analyses from April to October 2026 recorded over 1,200 sandbox submissions tied to fake AI tool campaigns, with Claude and ChatGPT lures dominating.

    3 min read

  4. Onamae Desktop Cloud review: October 2026 VPS breach and compensation process

    The Onamae Desktop Cloud breach allowed unauthorized access to Windows VPS instances used for FX trading, leading to data theft and unauthorized trades across more than 70 broker accounts.

    3 min read

  5. Lawson Japan Data Breach Exposes 2.15 Million Customer Records

    Lawson disclosed unauthorized access to 2.15 million Lawson ID accounts and a smaller App Reservation incident, with email and name data exposed.

    2 min read

  6. JM Bullion Breach: Six-Month Delay in Customer Notifications

    An unauthorized actor accessed JM Bullion customer records between April 12 and 14, 2026. The company notified affected individuals six months later.

    3 min read

  7. eMudhra Review: Key Weakness Forces Exit from Global TLS Business

    Eight eMudhra intermediate CA keys generated with insufficient randomness led to immediate browser blocks and the company's withdrawal from global TLS issuance in October 2026.

    3 min read

  8. OVHcloud CLI security review after the October 2026 supply-chain incident

    The OVHcloud CLI supply-chain compromise lasted 94 minutes on October 19, 2026, and affected five releases. Users who downloaded binaries during that window should rotate credentials and reinstall from the latest version.

    3 min read

  9. LiteLLM Security Review: Supply Chain Compromise Through Malicious Package

    A malicious LiteLLM release on October 21, 2026, exposed users to credential theft via infected PyPI packages and Docker images. Organizations must audit deployments and rotate keys immediately.

    3 min read

  10. OVHcloud CLI review: Security Risks from the October 2026 Malicious Release

    Attackers replaced OVHcloud CLI binaries for versions v0.11.0 to v0.15.0 on October 19, 2026. The incident exposed users to an information-stealing payload that targeted cloud credentials and SSH keys.

    3 min read

  11. Aoki Infostealer Targets AI Coding Assistants for Credential Theft

    Symantec identified expanded Aoki infostealer variants that harvest credentials from AI coding assistants, enabling LLMjacking and unauthorized access to linked services.

    3 min read

  12. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read