Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads

by admin | Jul 14, 2026 | Uncategorized

xAI’s Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher publishing as cereblab, testing version 0.2.93, captured one of...

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

by admin | Jul 14, 2026 | Uncategorized

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors’ and other cybercriminals’ malicious activities, including ransomware attacks against...

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

by admin | Jul 14, 2026 | Uncategorized

A campaign of 148 npm packages disguised as student web proxies turned visitors’ browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers who might...

Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths

by admin | Jul 14, 2026 | Uncategorized

Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw in the platform. The way in has been the trust the organization had already extended,...

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

by admin | Jul 13, 2026 | Uncategorized

Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based...