Hugging Face Malware Hijacks GPU Servers Days After Takedown
Fake AI models now work as a delivery system for crypto mining code. Hugging Face malware came back within days of a takedown, under fresh accounts and new repos. One fake model pulled more than 28,000 downloads while scans kept marking it clean. This Hugging Face malware goes after the GPU server itself, so anyone running self-hosted AI on their
Discord Starts Indexing Messages: How to Opt Out Now
Millions of people treat big Discord communities as a back room, somewhere between a group chat and a forum. That comfortable assumption now has an expiry date. Discord will begin indexing messages from its biggest public servers so they turn up in Google and other search engines. The first phase starts on November 16, and more than 63,000 communities fall
Convertr Card Skimmer Stole Cards From Dozens of Brands
Shoppers at dozens of Brazilian fashion brands handed their card details to criminals this month. They clicked nothing suspicious. The Convertr card skimmer sat inside an analytics file that every store on the platform already trusted and loaded on its own payment page. From October 24, those checkouts copied card numbers, security codes and taxpayer IDs, then shipped them to
ENGIE Data Breach Exposes Customer Details via Partner Tool
Letters have been arriving at French households carrying an uncomfortable message: a system most recipients never knew existed was holding their personal details, and no longer holds them alone. The sender is ENGIE. Criminals got into a prospecting tool that the supplier’s sales partners rely on, and the ENGIE data breach that followed pushed names, addresses and contract references into
Time4Popcorn Vulnerability Left Millions of PCs Wide Open
Millions of computers around the world spent years calling home to a domain that nobody owned. The machines ran Time4Popcorn, an old fork of the Popcorn Time streaming app, and most of the people who installed it had long since forgotten it was there. A Time4Popcorn vulnerability in the update system left all of them open to full takeover. Researchers
Onamae Desktop Cloud Hack Hits Up to 27,000 Servers
Thousands of Japanese server renters woke up to dead machines on October 21. The cause was an Onamae Desktop Cloud hack that hit the host company itself, not the customers above it. Up to 26,739 servers may now carry malware left behind by an intruder. So the provider powered the whole service down rather than let that code keep running.
PHP2Shell Vulnerability Puts Most of the Web at Risk
PHP runs about three quarters of the web, so a bug in it rarely stays small for long. On October 21 the PHP team shipped emergency patches for two critical flaws now known as PHP2Shell, and each PHP2Shell vulnerability hands a remote attacker code execution on a server without any login. Details leaked days early. By the time most admins
Zeabur Data Breach Hits 321,810 Accounts, Platform Closing
Zeabur built its business on taking the messy parts of deployment off a developer’s hands, which meant holding the keys to thousands of other people’s systems. Those keys now belong to someone else. The Zeabur data breach exposed 3.2 million environment variable records and account data for 321,810 users, nine weeks after the first attack. Days later, the firm decided
Rank Math Backdoor Hit Paid WordPress Sites for 11 Hours
Site owners who paid for a premium WordPress SEO plugin ended up installing malware instead. The Rank Math backdoor shipped inside an official build of Rank Math PRO 3.0.123, pulled straight from the vendor’s own download servers, where it sat for roughly 11 hours. Nothing looked off. Anyone who activated that version during the window now owns a hacked website.
Hirudo Android Malware Swaps Banking Apps For Fake Copies
Most people trust their banking app more than anything else on their phone. Hirudo, a new Android malware family, goes straight after that trust. Instead of faking a login screen, it deletes the real app and installs a rigged copy. The copy looks the same and works the same, but its security checks no longer do. How Hirudo Android malware
