Maccy: Legitimate macOS Clipboard Manager Impersonated by Malware
Maccy is an open-source clipboard manager for macOS. Its official website is maccy.app. Fake sites like maccyapp[.]com and maccyapp[.]net distribute PamStealer malware…
Tag: Open Source
Redis: In-Memory Data Store
Redis is an open-source, in-memory data structure store. Multiple versions were affected by zero-day vulnerabilities discovered by AI agents, including 6.2.22, 7.4.9,…
GuardFall Bypass Exploits Shell Injection in Open-Source AI Coding Agents
New research from Adversa AI, dubbed 'GuardFall,' reveals that ten out of eleven popular open-source AI coding agents are vulnerable to a…
Linux Foundation Provides Neutral Ground for Open Secure AI Alliance
The Linux Foundation joins as an inaugural partner to provide a neutral place for competing organizations to collaborate.
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept (PoC) has been released for CVE-2026-55200, a critical vulnerability in the libssh2 client-side SSH library. The flaw, with a…
GeoServer: Open-Source Mapping Server Under Active Attack
GeoServer is an open-source server for sharing geospatial data. A newly disclosed zero-day SQL injection vulnerability is being actively exploited, potentially leading…
SoftEther VPN: Open-Source VPN Used by Attackers
SoftEther VPN is an open-source VPN solution that has been co-opted by threat actors like CL-STA-1062 to establish encrypted tunnels for command…
VNT: Open-Source VPN Tool Used in Cyber Attacks
VNT is an open-source VPN utility that has been used by CL-STA-1062 to facilitate secure communications and lateral movement within compromised networks.
Yuze: SOCKS5 Proxy Tool Used by CL-STA-1062
Yuze is an open-source SOCKS5 proxy tool that has been employed by CL-STA-1062 to route traffic and maintain persistence in targeted environments.
Mini Shai-Hulud: Worm Framework Used in Supply Chain Attacks
Mini Shai-Hulud is a worm framework open-sourced by TeamPCP in May 2026. It was used in a campaign that poisoned npm packages…