@trisha_m_clay@infosec.exchange

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 27, 2026

MedusaHVNC is a remote access trojan (RAT) being sold as malware-as-a-service (MaaS). It is promoted through its own website and a Telegram channel. It was found and analyzed by BlackFog, which identified a hidden virtual network computing (HVNC) module that opens a legitimate browser on a separate, hidden Windows desktop. Since it operates from a hidden desktop, its operation is invisible to the user. #cybersecurity https://www.securityweek.com/medusahvnc-malware-uses-hidden-windows-desktops-to-evade-detection/

SecurityWeek

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection

MedusaHVNC is a powerful remote access trojan (RAT) being sold as malware-as-a-service (MaaS).

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 22, 2026

The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication #cybersecurity https://www.bleepingcomputer.com/news/security/adobe-chrome-extension-flaw-let-sites-access-private-whatsapp-chats/

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 21, 2026

Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf #cybersecurity https://www.bleepingcomputer.com/news/security/critical-globalprotect-vpn-bug-now-exploited-in-ransomware-attacks/

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 21, 2026

Researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit #cybersecurity https://thehackernews.com/2026/07/fakegit-campaign-uses-7600-github.html

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 20, 2026

The Hugging Face #ai repository disclosed that attackers gained access to internal datasets and credentials after breaching its production infrastructure using an autonomous AI agent system #cybersecurity https://www.bleepingcomputer.com/news/security/hugging-face-breach-autonomous-ai-agent-system-internal-datasets-credentials/

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 20, 2026

Ernst & Young incident was discovered on April 23 and involved a third-party service management platform they use to support tax-related work it performs on behalf of its clients “Support tickets submitted through the platform may include documents containing client tax information" #cybersecurity https://www.securityweek.com/ernst-young-data-breach-affects-personal-financial-information/

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 20, 2026

An espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050 #cybersecurity https://thehackernews.com/2026/07/hollowgraph-malware-hides-c2-and-stolen.html

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 20, 2026

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately #cybersecurity https://www.bleepingcomputer.com/news/security/wordpress-core-wp2shell-rce-flaws-get-public-exploits-patch-now/

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 16, 2026

n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it matched an incoming JWT to a local user on the sub claim alone and ignored iss #cybersecurity https://thehackernews.com/2026/07/n8n-token-exchange-flaw-could-let.html

1

0

2

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 10, 2026

AI coding assistants, when asked to fetch a popular tool, will sometimes hand back a real-sounding name for a project that does not exist. HalluSquatting, turns that habit into an attack: work out the fake names an AI reliably invents, register them first, and wait for the assistant to fetch your trap on a user's behalf #cybersecurity https://thehackernews.com/2026/07/new-hallusquatting-attack-could-trick.html

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 07, 2026

A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials from marketing professionals #cybersecurity https://www.bleepingcomputer.com/news/security/phishing-poses-as-big-brand-job-interview-to-steal-google-accounts/

0

1

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 07, 2026

GitHub Agentic Workflows can be tricked into leaking the contents of an organization's private repositories. Attacker needs only to open a normal-looking issue on a public repository, and if that organization has given the agent read access across its private repositories, the issue can steer it into pulling private contents into a public comment #cybersecurity https://thehackernews.com/2026/07/public-github-issue-could-trick-github.html

0

Trisha Clay (she/her) @trisha_m_clay@infosec.exchange · Jul 07, 2026

Suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities #cybersecurity https://thehackernews.com/2026/07/suspected-china-aligned-hackers-exploit.html

0

Trisha Clay (she/her)

Posts

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection

Remote instance