Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer https://firewalls.firm.in/wp-content/uploads/2026/08/npms.jpg A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. “These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them ...
Read More »Vulnerabilities & Exploits
Building trust in healthcare data: From pipelines to patient care
Building trust in healthcare data: From pipelines to patient care https://etimg.etb2bimg.com/thumb/msid-132711155,imgsize-71975,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/building-trust-in-healthcare-data-from-pipelines-to-patient-care.jpg In every healthcare organization, multiple validations are done before go-live. But once systems are live, changes continue, and trust in the data and process can begin to erode. Treating data trust as a one-time pre-launch step rather than an ongoing discipline leads to failed analytics, compliance exposure, and unreliable ...
Read More »Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes https://firewalls.firm.in/wp-content/uploads/2026/08/coldcard.jpg Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware ...
Read More »BoB data breach puts spotlight on banking cybersecurity as sensitive customer records surface on Dark Web
BoB data breach puts spotlight on banking cybersecurity as sensitive customer records surface on Dark Web https://etimg.etb2bimg.com/thumb/msid-132725840,imgsize-17566,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/bob-data-breach-puts-spotlight-on-banking-cybersecurity-as-sensitive-customer-records-surface-on-dark-web.jpg The alleged data breach at Bank of Baroda (BoB) is triggering fresh concerns over cybersecurity posture as well as preparedness in India’s banking sector after sensitive customer records, including Know Your Customer (KYC) documents, surfaced on the dark web. The incident has the ...
Read More »DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware https://firewalls.firm.in/wp-content/uploads/2026/07/all-secure.jpg Ravie LakshmananJul 30, 2026Malvertising / Cryptocurrency Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious ...
Read More »Australian regulator says Telegram breached online safety law
Australian regulator says Telegram breached online safety law https://etimg.etb2bimg.com/thumb/msid-132725875,imgsize-17457,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/australian-regulator-says-telegram-breached-online-safety-law.jpg Australia’s cyber safety watchdog took court action Thursday against Telegram, alleging the global messaging platform had failed to remove terrorism material. Under Australia’s online safety law, Telegram faces a maximum penalty of up to AU$54.6 million ($38 million). The development comes a day after Russia announced it was seeking the arrest ...
Read More »Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory https://firewalls.firm.in/wp-content/uploads/2026/07/mcp.jpg Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 (CVSS score: 10.0), impacts all versions of the project before version 3.16.3. It ...
Read More »Bank of Baroda data leak: Compromised employee email linked to alleged 1TB data leak on darknet
Bank of Baroda data leak: Compromised employee email linked to alleged 1TB data leak on darknet https://etimg.etb2bimg.com/thumb/msid-132674551,imgsize-60056,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/bank-of-baroda-data-leak-compromised-employee-email-linked-to-alleged-1tb-data-leak-on-darknet.jpg Bank of Baroda said a recent data leak linked to a reported cyberattack stemmed from the compromise of a single employee’s email account after claims emerged that up to one terabyte of data, including customers’ Aadhaar details, was leaked on the darknet. The ...
Read More »Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost
Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost https://firewalls.firm.in/wp-content/uploads/2026/07/MAI-Cyber-1-Flash.jpg Swati KhandelwalJul 28, 2026AI Security / Vulnerability Management Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than ...
Read More »Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available https://firewalls.firm.in/wp-content/uploads/2026/07/fastjson.gif Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











