Google Gemini CLI abused as a hacking agent, malware botnet operator

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...
Infosecurity Magazine

Open Directory Exposes Three Evilginx Phishing Operators

A single misconfigured server has exposed the complete toolkit of an active a three-actor phishing ecosystem. According to ...
The Hacker News

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...
theregister

Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and helpdesk staff impersonation - is also using custom malware in its ...
GitHub

Cheroot is the high-performance, pure-Python HTTP server used by CherryPy.

The test suite currently relies on pytest. It's being run via GitHub Actions CI/CD workflows. Professional support for Cheroot is available as part of the Tidelift Subscription. The CherryPy ...
GitHub

Building a Web Server From Scratch in Pure Python

This repository contains Python code examples accompanying the blog post Building a Web Server From Scratch in Pure Python. This project is an educational exploration of building basic web servers in ...
Bleeping Computer

BlackCat ransomware shuts down in exit scam, blames the "feds"

The BlackCat ransomware gang is pulling an exit scam, trying to shut down and run off with affiliates’ money by pretending the FBI seized their site and infrastructure. The gang announced they are now ...
CSOonline

FBI warns against cloud credential-stealing Androxgh0st botnet

The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency (CISA) have published an urgent advisory about the Androxgh0st botnet, which is being used to steal cloud ...