https://alickaj.eu/ Innovation. Imagination. Limitless. en Sun, 26 Jul 2026 19:09:24 +0000 AEU Showcase https://alickaj.eu/?read=malvertising-campaigns-evade-detection-by-assembling-malware-directly-in-the-bro https://alickaj.eu/?read=malvertising-campaigns-evade-detection-by-assembling-malware-directly-in-the-bro Sun, 26 Jul 2026 12:52:18 +0000 Attackers are using a new malvertising technique that delivers malware in fragmented pieces and uses JavaScript to rebuild the executable client-side, bypassing traditional security filters. Security Insights https://alickaj.eu/?read=devman-raas-portal-lowers-barrier-to-entry-for-ransomware-attacks https://alickaj.eu/?read=devman-raas-portal-lowers-barrier-to-entry-for-ransomware-attacks Sun, 26 Jul 2026 12:53:53 +0000 A new ransomware-as-a-service platform, DevMan, integrates payload generation, victim management, and affiliate payments into a single dashboard, making it easier for criminals to launch and profit from attacks. Security Insights https://alickaj.eu/?read=bluenoroff-phishing-kit-impersonates-zoom-to-steal-crypto-wallets https://alickaj.eu/?read=bluenoroff-phishing-kit-impersonates-zoom-to-steal-crypto-wallets Sun, 26 Jul 2026 12:55:02 +0000 A new phishing kit from the BlueNoroff group uses fake Zoom invitations to silently profile cryptocurrency wallets before delivering malware, putting businesses and website owners at risk of data theft. Security Insights https://alickaj.eu/?read=golden-chickens-threat-group-returns-with-four-new-malware-families https://alickaj.eu/?read=golden-chickens-threat-group-returns-with-four-new-malware-families Sun, 26 Jul 2026 12:56:37 +0000 Cybersecurity outlets report the revival of Golden Chickens with four novel malware families and modular implants, signaling heightened risks for online platforms. Security Insights https://alickaj.eu/?read=steam-forum-clickfix-scam-silently-installs-xmrig-cryptominer-via-fake-powershel https://alickaj.eu/?read=steam-forum-clickfix-scam-silently-installs-xmrig-cryptominer-via-fake-powershel Sun, 26 Jul 2026 12:58:47 +0000 Threat actors are exploiting Steam discussion forums with ClickFix social engineering, tricking gamers into running malicious PowerShell commands that secretly deploy XMRig miners. Security Insights https://alickaj.eu/?read=javascript-powered-malvertising-builds-malware-silently-in-browser-memory https://alickaj.eu/?read=javascript-powered-malvertising-builds-malware-silently-in-browser-memory Sun, 26 Jul 2026 13:00:01 +0000 A sophisticated malvertising operation tricks crypto traders with fake sites that use JavaScript to construct malware entirely in the browser, avoiding network-based defenses. The campaign targets users in Asia-Pacific a… Security Insights https://alickaj.eu/?read=shinyhunters-data-leaks-fuel-2-000-bitcoin-sextortion-scam https://alickaj.eu/?read=shinyhunters-data-leaks-fuel-2-000-bitcoin-sextortion-scam Sun, 26 Jul 2026 13:01:29 +0000 Threat actors are leveraging email addresses from past ShinyHunters data breaches to send sextortion emails demanding Bitcoin payments, though the hacking group denies involvement. Security Insights https://alickaj.eu/?read=chatgpt-global-outage-disrupts-ai-services-openai-rushes-fix https://alickaj.eu/?read=chatgpt-global-outage-disrupts-ai-services-openai-rushes-fix Sun, 26 Jul 2026 13:02:47 +0000 OpenAI's ChatGPT and API suffered a worldwide outage, affecting millions of users and websites integrated with the service. Recovery was completed after almost an hour. Security Insights https://alickaj.eu/?read=ontrac-data-breach-exposes-customer-information-after-network-intrusion https://alickaj.eu/?read=ontrac-data-breach-exposes-customer-information-after-network-intrusion Sun, 26 Jul 2026 13:03:52 +0000 Parcel delivery firm OnTrac alerts customers that hackers accessed personal data during a three-day network breach, prompting free credit monitoring services. Security Insights https://alickaj.eu/?read=open-source-hermes-ai-agent-used-to-automate-thai-ministry-cyberattack https://alickaj.eu/?read=open-source-hermes-ai-agent-used-to-automate-thai-ministry-cyberattack Sun, 26 Jul 2026 13:05:47 +0000 Exposed attacker infrastructure revealed how the Hermes AI agent in YOLO mode automated post-exploitation tasks, including privilege escalation and system mapping, against Thailand’s Ministry of Finance. Security Insights https://alickaj.eu/?read=hackers-hijack-hotel-wi-fi-dns-to-redirect-microsoft-365-logins https://alickaj.eu/?read=hackers-hijack-hotel-wi-fi-dns-to-redirect-microsoft-365-logins Sun, 26 Jul 2026 13:07:13 +0000 Attackers compromise hotel and conference center Wi-Fi gateways, altering DNS to redirect users to fake Microsoft 365 login pages and steal credentials or bypass MFA via device code phishing. Security Insights https://alickaj.eu/?read=unpatched-fastjson-1-x-remote-code-execution-flaw-under-active-attack https://alickaj.eu/?read=unpatched-fastjson-1-x-remote-code-execution-flaw-under-active-attack Sun, 26 Jul 2026 02:30:59 +0000 Attackers are exploiting a critical RCE vulnerability in Fastjson 1.x, with no official patch available. Site owners using Java-based applications are urged to mitigate immediately. Security Insights https://alickaj.eu/?read=gitlab-rce-proof-of-concept-released-authenticated-attackers-can-execute-command https://alickaj.eu/?read=gitlab-rce-proof-of-concept-released-authenticated-attackers-can-execute-command Sun, 26 Jul 2026 02:32:26 +0000 A security researcher has published a working proof-of-concept for a remote code execution flaw in GitLab, allowing authenticated users to run arbitrary commands on the server with the privileges of the 'git' user. Security Insights https://alickaj.eu/?read=cl0p-ransomware-affiliates-exploit-unpatched-rce-in-ptc-windchill-and-flexplm https://alickaj.eu/?read=cl0p-ransomware-affiliates-exploit-unpatched-rce-in-ptc-windchill-and-flexplm Sun, 26 Jul 2026 02:34:11 +0000 The Cl0p ransomware group is actively exploiting an unauthenticated remote code execution flaw in PTC's Windchill and FlexPLM products, targeting internet-exposed servers to deploy ransomware. Immediate patching and acce… Security Insights https://alickaj.eu/?read=certighost-exploit-allows-low-privileged-ad-users-to-impersonate-domain-controll https://alickaj.eu/?read=certighost-exploit-allows-low-privileged-ad-users-to-impersonate-domain-controll Sun, 26 Jul 2026 02:35:45 +0000 A new Active Directory exploit enables attackers with minimal privileges to hijack domain controller identities, posing serious risks to domain-joined web servers and hosting environments. Security Insights https://alickaj.eu/?read=thai-ministry-breach-shows-rise-of-ai-powered-post-exploitation-agents https://alickaj.eu/?read=thai-ministry-breach-shows-rise-of-ai-powered-post-exploitation-agents Sun, 26 Jul 2026 02:37:08 +0000 Hackers deployed an autonomous AI agent to maintain access and move laterally inside the Thai Finance Ministry—a technique that could threaten web hosting and business networks. Security Insights https://alickaj.eu/?read=ai-agent-uncovers-critical-zero-day-flaws-in-redis-crafts-exploit-code https://alickaj.eu/?read=ai-agent-uncovers-critical-zero-day-flaws-in-redis-crafts-exploit-code Sun, 26 Jul 2026 02:38:26 +0000 Researchers reveal that the AI agent Kimi K3 autonomously discovered multiple zero-day vulnerabilities in the popular in-memory database Redis and developed a working remote code execution exploit, raising urgent concern… Security Insights https://alickaj.eu/?read=fake-notepad-plugin-spreads-matchboil-v2-backdoor-in-uac-0099-campaign https://alickaj.eu/?read=fake-notepad-plugin-spreads-matchboil-v2-backdoor-in-uac-0099-campaign Sun, 26 Jul 2026 02:40:01 +0000 A malicious plugin for Notepad++ is being used by threat group UAC-0099 to deliver the MATCHBOIL.V2 backdoor, posing risks to developers and their managed websites. Security Insights https://alickaj.eu/?read=wp-shellstorm-backdoor-compromises-thousands-of-wordpress-sites-found-on-exposed https://alickaj.eu/?read=wp-shellstorm-backdoor-compromises-thousands-of-wordpress-sites-found-on-exposed Sun, 26 Jul 2026 02:41:06 +0000 An uncovered hacker control server has brought to light a vast WordPress backdoor campaign. Thousands of sites are infected with the WP-SHELLSTORM malware, granting attackers lasting unauthorized access. Security Insights https://alickaj.eu/?read=new-mistic-backdoor-linked-to-kongtuke-spotted-in-clickfix-and-modelorat-campaig https://alickaj.eu/?read=new-mistic-backdoor-linked-to-kongtuke-spotted-in-clickfix-and-modelorat-campaig Sun, 26 Jul 2026 02:42:24 +0000 A newly discovered backdoor named Mistic has been associated with the KongTuke threat actor, appearing in ClickFix and ModeloRAT malware campaigns. Website owners should review their security posture. Security Insights https://alickaj.eu/?read=shapedplugin-wordpress-pro-plugins-compromised-in-coordinated-supply-chain-breac https://alickaj.eu/?read=shapedplugin-wordpress-pro-plugins-compromised-in-coordinated-supply-chain-breac Sun, 26 Jul 2026 02:43:31 +0000 A supply chain attack backdoored ShapedPlugin's premium WordPress plugins, putting sites at risk. Users must audit, update, and scan immediately. Security Insights https://alickaj.eu/?read=gravity-smtp-wordpress-plugin-exploited-to-steal-api-keys https://alickaj.eu/?read=gravity-smtp-wordpress-plugin-exploited-to-steal-api-keys Sun, 26 Jul 2026 02:44:36 +0000 Attackers are actively exploiting a vulnerability in the Gravity SMTP WordPress plugin to extract API keys, putting email-sending configurations and site communications at risk. Security Insights https://alickaj.eu/?read=certighost-exploit-lets-low-privileged-ad-users-impersonate-a-domain-controller https://alickaj.eu/?read=certighost-exploit-lets-low-privileged-ad-users-impersonate-a-domain-controller Sat, 25 Jul 2026 02:30:56 +0000 A new attack technique named Certighost enables low-privileged Active Directory users to masquerade as a domain controller, opening the door to credential theft and full network compromise. Security Insights https://alickaj.eu/?read=chatgpt-s-agentforger-flaw-enables-rogue-workspace-agents-via-phishing-links https://alickaj.eu/?read=chatgpt-s-agentforger-flaw-enables-rogue-workspace-agents-via-phishing-links Sat, 25 Jul 2026 02:32:08 +0000 A vulnerability in ChatGPT’s AgentForger could let attackers deploy malicious workspace agents through a single phishing link, risking data exfiltration and unauthorized access. Security Insights https://alickaj.eu/?read=microsoft-fixes-critical-bing-svg-flaw-attackers-could-execute-system-commands https://alickaj.eu/?read=microsoft-fixes-critical-bing-svg-flaw-attackers-could-execute-system-commands Sat, 25 Jul 2026 02:34:08 +0000 A vulnerability in Microsoft Bing's image processing allowed crafted SVG files to run code with SYSTEM privileges. The patch highlights why secure file handling is essential for all web services. Security Insights https://alickaj.eu/?read=ai-agent-hermes-deployed-unattended-for-post-exploitation-at-thai-finance-minist https://alickaj.eu/?read=ai-agent-hermes-deployed-unattended-for-post-exploitation-at-thai-finance-minist Sat, 25 Jul 2026 02:35:39 +0000 A hacker reportedly ran the Hermes AI agent autonomously after breaching Thailand's Ministry of Finance, highlighting the growing role of AI in automating cyberattacks and the need for advanced defenses. Security Insights https://alickaj.eu/?read=nodebb-patches-eight-ai-discovered-flaws-allowing-admin-takeover-and-private-mes https://alickaj.eu/?read=nodebb-patches-eight-ai-discovered-flaws-allowing-admin-takeover-and-private-mes Sat, 25 Jul 2026 02:37:14 +0000 A new wave of AI-driven vulnerability scanning uncovered critical security holes in NodeBB forum software, putting private chats and administrator accounts at risk; patches have been released. Security Insights https://alickaj.eu/?read=ai-agents-uncover-critical-redis-zero-days-craft-working-exploits https://alickaj.eu/?read=ai-agents-uncover-critical-redis-zero-days-craft-working-exploits Sat, 25 Jul 2026 02:38:25 +0000 Researchers demonstrated that AI agents can autonomously find and exploit Redis vulnerabilities, raising stakes for database security in web hosting environments. Security Insights https://alickaj.eu/?read=fake-notepad-plugin-found-dropping-matchboil-v2-trojan-in-ongoing-attacks https://alickaj.eu/?read=fake-notepad-plugin-found-dropping-matchboil-v2-trojan-in-ongoing-attacks Sat, 25 Jul 2026 02:39:46 +0000 A malicious add-on posing as a legitimate Notepad++ extension is being used to infect developer machines with the MATCHBOIL.V2 remote access trojan, putting website source code, credentials, and hosting environments at r… Security Insights https://alickaj.eu/?read=android-spyware-plc-attacks-and-ai-prompt-injection-what-site-owners-need-to-kno https://alickaj.eu/?read=android-spyware-plc-attacks-and-ai-prompt-injection-what-site-owners-need-to-kno Sat, 25 Jul 2026 02:41:26 +0000 A weekly threat roundup reminds web administrators to stay vigilant against mobile spyware that may steal credentials, attacks on industrial controllers, and malicious AI prompts. Security Insights