LIVE · cybersecurity feed
Live wire
Rails patches critical Active Storage flaw with RCE potentialCVE-2026-48449 · Adobe fixed a maximum-severity vulnerability flaw in Campaign ClassicRuby on Rails Patches Critical VulnerabilityHackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer SitesHijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance MalwareCaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theftThe Journey towards Logically Air-Gapped DeploymentCVE-2025-66376 · Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA CodesDon’t swing at everythingRussian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations

blockchain

npmhigh

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver RAT

Researchers have identified seven malicious npm packages that were part of a software supply chain attack targeting the Vite frontend tooling ecosystem. These packages, dubbed ViteVenom, utilized a sophisticated four-tier blockchain-based command-and-control infrastructure across multiple networks to deliver a remote access trojan (RAT).

malwarehigh

Windsurf IDE Extension Drops Malware via Solana Blockchain

Researchers have identified a malicious extension for the Windsurf IDE that utilizes the Solana blockchain to distribute a multi-stage malware. This stealer is designed to exfiltrate sensitive information.