Shipping giant A.P. Møller-Maersk has been reportedly impacted by a data theft attack, with limited details currently available regarding the nature or scope of the incident.
A new automated campaign named Gheist is using stolen access tokens to exfiltrate sensitive data from private GitHub repositories by abusing GitHub Actions logs.
Ledger has confirmed that hardware implants in its signers, sold through a reseller, allowed attackers to intercept 24-word recovery phrases. On-chain investigators estimate losses at $86 million.
EfficientIP researchers flagged several AliExpress phishing domains before registration, uncovering a campaign that uses fake browser extensions to steal credentials.
Threat actors are combining social engineering with malicious OAuth applications to bypass password-based security and access sensitive Google Workspace data.
