cPGuard Update Channel Hijacked to Backdoor Linux Servers

Password manager mSecure warned users to change their passwords and reset two-factor authentication and passkeys after suspicious activity. The alert matters because password managers store highly sensitive credentials that could expose many accounts if compromised.

Blockchain infrastructure provider Chainstack reported that a breach of its production systems exposed customer data and password hashes. The disclosure raises credential-compromise risks for affected customers and may require password resets and security reviews. A compromise at a shared infrastructure provider can have wide impact across blockchain projects that rely on its services.

Binance has revealed how fake job interviews and misuse of AI tools were used in a scheme linked to $6.43 billion in stolen funds. The case highlights how social engineering and AI-assisted tactics can enable large-scale crypto theft and why platforms are warning users.

Google warned that LLMjacking attacks, in which attackers abuse cloud credentials to access large language models, are driving some enterprises' cloud bills as high as $1 million. The warning highlights a growing AI and cloud security risk that can cause major financial damage.

Red Hat has patched a critical 9.8-rated remote code execution vulnerability in Linux TCP, while Ubuntu has released fixes for testing. The flaw is severe and affects widely used Linux networking code, making prompt patching important for exposed systems.