PARTY INVITE PHISHING SCAMS LURE USERS WITH FAKE EVITES
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Scammers are spoofing popular invitation platforms like Evite and Paperless Post to steal personal data. The deceptive emails are convincing enough that some recipients use them as opportunities to reconnect with old contacts.
■ MORE FROM THE SECURITY DESK
Cryptocurrency exchange Bitget disclosed a breach of its hot and warm wallets, with hackers stealing $351.6 million. The attack is attributed to suspected North Korean threat actors.
A Kosovar national has pleaded guilty to operating Rydox, an illegal online marketplace that trafficked in stolen personal information, login credentials, and cybercrime tools. The admin faces up to 22 years in prison.
A cross-site scripting (XSS) vulnerability in the ansi2html library exposed Sourcehut users to account takeover attacks through malicious build log output. The flaw allowed attackers to inject arbitrary code into rendered logs.
Two developers independently demonstrated that Meta's Muse AI can be prompted to download and share its entire filesystem, including system files and internal documentation. The vulnerability reportedly requires minimal effort to exploit.