McAfee says the campaign uses unsigned. NET and Golang installers, EtherHiding C2, and silent Chromium extension injection to swap wallet addresses.
Get the latest international news and world events from around the world.
Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Phantom squatting is the domain version of slopsquatting, where attackers register the fake software package names that AI coding tools invent. That is not a hypothetical.
A large USENIX study found code-generating models routinely suggest package names that do not exist, and the PhantomRaven campaign turned exactly that behavior into malware hidden in 126 npm packages with more than 86,000 installs.
It points to a larger shift: model output is becoming input. Developers, agents, and security teams act on AI-generated links and names before anyone verifies them, and AI keeps shrinking the time defenders have to react.
Adobe patches seven max severity ColdFusion, Campaign flaws
Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and the Campaign Classic marketing automation platform.
All these vulnerabilities can be exploited in low-complexity attacks that don’t require user interaction and were tagged with priority 1, indicating a high risk of being targeted.
“This update resolves vulnerabilities being targeted, or which have a higher risk of being targeted, by exploit(s) in the wild for a given product version and platform. Adobe recommends administrators install the update as soon as possible. (for example, within 72 hours),” Adobe says.
Microsoft accelerates quantum-safe roadmap as risks grow
Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are bringing the need to replace today’s encryption standards sooner than previously expected.
Although today’s quantum computers cannot crack modern encryption, security researchers have warned about “harvest now, decrypt later” attacks. In these attacks, encrypted data that is stolen today is stored until future quantum computers become powerful enough to decrypt it, exposing sensitive information.
As a result, companies including Apple, Google, and Signal have begun integrating post-quantum cryptography (PQC) to replace existing public-key encryption algorithms with quantum-resistant versions.
Young stellar activity drives galactic evolution across the universe
Astronomers have revealed new details about how young stars shape their galactic surroundings in a new study. Researchers analyzed about 18,000 star-forming regions in nearby spiral galaxies using data from powerful instruments like the James Webb Space Telescope, Hubble Space Telescope and the Atacama Large Millimeter/submillimeter Array, whose observations were made as part of the PHANGS survey—a collaboration aimed at better understanding galactic evolution.
They found that in normal galaxies, pressure from ionized gas drives the expansion of young star-forming regions. However, whether these zones continue to grow or remain stagnant depends strongly on their surrounding environment, said Debosmita Pathak, lead author of the study and a graduate student in astronomy at The Ohio State University.
“When young massive stars are born, they’re very energetic and pump out a ton of photons into their surroundings,” said Pathak. “In that process, they disrupt their local environments and start to drive interstellar material out of the area.”