FBI investigates claims of hacking group ShinyHunters compromising agent data and jobs site https://etimg.etb2bimg.com/thumb/msid-134449704,imgsize-1147107,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/fbi-investigates-claims-of-hacking-group-shinyhunters-compromising-agent-data-and-jobs-site.jpg The FBI said Wednesday that it was investigating a criminal hacking group’s claims that it had stolen “very sensitive data” belonging to thousands of agents and applicants and that it had compromised the bureau’s jobs website. “The FBI is aware of a cyber-criminal enterprise group claiming ...
Read More »Vulnerabilities & Exploits
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members https://firewalls.firm.in/wp-content/uploads/2026/10/shinyhunters-arrested.jpg A suspected member of the ShinyHunters digital extortion group, who goes by the online alias “Rey,” has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter. Rey, whose real name is Saif al-Din Khader, is said to have been brought ...
Read More »Labcorp data breach: 27.5 million records exposed, company ordered to strengthen vendor security
Labcorp data breach: 27.5 million records exposed, company ordered to strengthen vendor security https://etimg.etb2bimg.com/thumb/msid-134495955,imgsize-1102268,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/labcorp-data-breach-27-5-million-records-exposed-company-ordered-to-strengthen-vendor-security.jpg A massive breach at Labcorp’s debt collector exposed the personal data of more than 27.5 million people in 2019. Seven years later, a coalition of 44 states has secured a $2.3 million settlement and new safeguards to protect consumers’ sensitive medical and financial information. Between August ...
Read More »Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware https://firewalls.firm.in/wp-content/uploads/2026/09/github-shai.jpg Ravie LakshmananSep 25, 2026Malware / Supply Chain Attack Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below – Visiting ...
Read More »TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor https://firewalls.firm.in/wp-content/uploads/2026/08/cf-clickfix.jpg Ravie LakshmananAug 30, 2026Social Engineering / Malware Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious command in Windows Terminal or PowerShell. “While traditional ClickFix campaigns direct victims to the Windows Run dialog, TerminalFix campaigns apply the same technique ...
Read More »Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE https://firewalls.firm.in/wp-content/uploads/2026/08/wordpress-themes.jpg Ravie LakshmananAug 29, 2026Vulnerability / Web Security Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack, ...
Read More »19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code https://firewalls.firm.in/wp-content/uploads/2026/08/1000103889.jpg Ravie LakshmananAug 28, 2026Web Security / Supply Chain Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored wallet secret stealing and cryptocurrency draining capabilities. The extensions, per Socket security researcher Karlo Zanki, ...
Read More »Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE https://firewalls.firm.in/wp-content/uploads/2026/08/nodejs.gif Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem. The Windows path ...
Read More »NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions https://firewalls.firm.in/wp-content/uploads/2026/08/docusign.jpg Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead of publication, Island characterized the $320/month service as ...
Read More »Anthropic’s Claude chatbot conversations, including crypto keys, exposed on Google Search
Anthropic’s Claude chatbot conversations, including crypto keys, exposed on Google Search https://etimg.etb2bimg.com/thumb/msid-132677421,imgsize-353532,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/anthropics-claude-chatbot-conversations-including-crypto-keys-exposed-on-google-search.jpg A trove of seemingly private conversations with Anthropic’s Claude chatbot appeared in Google Search results recently, sparking alarm after users discovered sensitive information including cryptocurrency wallet keys and personal details which have been exposed inadvertently. According to a report by Fortune, the issue was traced to Claude’s ‘share’ ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











