Jamf detailed CrashStealer, a macOS infostealer delivered through a signed, Apple-notarized app called Werkbit that passes Gatekeeper, since it carried a valid developer ID before Apple revoked it. Distributed as a disk image and gated behind a meeting PIN so it is served only to targeted visitors, the malware validates the victim's login password locally, then harvests broadly from browsers, cryptocurrency wallets, password managers, and the keychain, encrypting the loot before sending it out. It persists by copying and re-signing itself. There is no zero-click stage: a victim still runs the app and enters their password, but the notarized delivery and careful targeting make it more convincing than typical Mac stealers.
Google and Microsoft removed ModHeader, a header-editing browser extension popular with developers, with about 1.6 million installs, after researchers at Stripe OLT found a hidden browsing-history collector inside the official, signed store version. The collector was dormant, gated off by an empty allow-list, and no evidence has emerged that it ever sent data, but its presence in a trusted, signed extension is the concern. Its design frustrated automated review: the data was encrypted, the upload was switched off so sandboxes saw nothing leave, and malicious code was blended into a legitimate codebase, so scanners rated it low risk. It is a reminder that a store signature proves origin, not safe behavior.
A phishing operator left a Python web server exposed with directory listing on, letting researchers at Lexfo lift the entire toolkit and pivot to two more operators running three Microsoft 365 phishing campaigns. Each used a custom fork of the open-source Evilginx proxy to steal live session cookies and tokens, defeating multi-factor authentication by relaying the real login. The largest campaign ran over a year, logging 218 captured accounts, mostly corporate mailboxes, and a token file left in a public repository held 97 live Microsoft tokens. The report stresses two different MFA-bypass methods appeared, one proxying the real login and one abusing the device-code flow, which require different defenses to stop.
Nihon Kotsu, Japan's largest taxi operator, shut down internal systems after a cyberattack, disrupting parts of its operations while it investigates and recovers. Precautionary shutdowns like this are a common response to intrusions such as ransomware, aimed at containing an attacker and limiting damage while forensic work proceeds, though they also interrupt normal business. The incident fits a broader pattern of attacks against transportation and logistics providers, whose real-time operations and large customer bases make downtime costly and pressure on victims high. Full details, including whether customer data was accessed, were not yet available, but the disruption underscores how operational technology and business systems in transport are increasingly targeted.
Researchers at the ASSET Research Group demonstrated Ghostcommit, an attack that hides malicious instructions inside a PNG image so AI code reviewers miss them entirely. A harmless-looking conventions file points the coding agent to the image, whose rendered text tells the agent to read the repository's .env file and encode its secrets as a list of numbers written into the code. Because tools like CodeRabbit and Bugbot skip image files by default, the pull request passes review clean; the trap springs later when a developer asks the agent for an unrelated task. The outcome depended on the tool wrapping the model: some agents leaked secrets, while Claude Code refused.
Attackers used a stolen publishing credential to push malicious versions of the jscrambler npm package that install a Rust infostealer as soon as the package is added to a project. Socket ties five bad versions to the same actor, published over about three hours; the malware ships as native binaries for Windows, macOS, and Linux and sweeps developer machines for cloud credentials, crypto wallets, and password-manager vaults. Because jscrambler is a build-time tool used in development and CI, the stealer runs where deploy tokens, cloud keys, and source code live. Partway through, the dropper moved into the package's main code, so installing with scripts disabled does not stop it.
Group-IB detailed a new version of the RedHook Android banking trojan that gains shell-level control of a phone by abusing the operating system's own wireless debugging feature, with no computer or root needed. Once a user is tricked into granting Accessibility permissions, the malware silently taps through Settings to enable Developer Options and Wireless Debugging, then pairs over the loopback interface to run privileged commands. From there it can silently install or remove apps, change secure settings, log keystrokes, stream the screen, and steal credentials, while an aggressive persistence stack keeps it running through reboots. It spreads through social engineering, with attackers impersonating government or bank staff.
Sysdig detailed a financially motivated operator who chained two Langflow vulnerabilities to raid the AI orchestration platform for credentials, part of why CISA just added one of them to its exploited-vulnerabilities catalog. Using a cross-tenant access flaw (CVE-2026-55255), the attacker ran flows belonging to other tenants to steal their large language model provider keys and AWS keys, while a separate unauthenticated code-execution flaw (CVE-2026-33017) took over the host itself. The activity, observed in late June against an internet-exposed Langflow instance, followed a methodical pattern of reconnaissance, flow enumeration, and credential theft. It underscores that AI orchestration platforms concentrate valuable secrets and are increasingly a direct target once left exposed online.
Researchers at Socket uncovered a network of 222 GitHub repositories, tracked as Operation Muck and Load, built to spread Windows malware through a fake Go module posing as a DNS and subdomain scanner. Running the module quietly launches PowerShell that pulls an encrypted payload from attacker infrastructure and deploys infostealers, remote access trojans, and cryptominers. To look trustworthy, the operators used an automated workflow that force-pushes fake commits every minute, making repositories appear actively maintained and generating hundreds of package versions. More than 700 of the module's 1,200-plus versions were malicious. The lures cluster around crypto wallets, Telegram bots, and game cheats, aimed at people likely to run untrusted code.
A cybercrime group left its own server exposed on the internet for weeks, revealing a mass website-hacking operation that researchers at SOCRadar now track as WP-SHELLSTORM. The crew breaks into sites at scale, plants hidden backdoors, and resells the access to other criminals. Rather than using zero-days, it automated attacks against 27 known vulnerabilities in outdated WordPress and Joomla plugins; a single flaw in the Breeze caching plugin accounted for over 17,000 backdoored sites. Target lists named more than 1.4 million domains, with roughly 25,000 confirmed compromised. The same server also revealed an earlier campaign that stole cloud credentials and database passwords from exposed configuration servers.
TrustStrike Labs