Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...
Cyber Daily

Bro! A wave of Discord account takeovers is spreading a MrBeast crypto scam

Scammers are spreading a fake crypto casino scam in the name of a popular YouTuber, with compromised Discord accounts as the ...
GitHub

AWS SSO Login Headless Automation

Automate AWS SSO login by reading output from aws sso login ... / argocd login --sso ... and automatically filling in credentials using browser headless automation. Use a password manager CLI to ...
The Hacker News

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...