Malware & Ransomware
Can browser hijackers steal passwords? The technical answer and limits
Browser hijackers rarely extract passwords directly, but they capture keystrokes and session tokens to bypass authentication without ever seeing the secret.
credential theft
Everything Payload Report has reported about credential theft: 2 stories, newest first. Part of our Malware & Ransomware coverage.
Cloud Security
GitHub CI/CD Secrets: Socket Reveals GhostAction Wave Stealing Cloud and AI Credentials
Socket research reveals a new GhostAction wave targeting hundreds of GitHub repositories, expanding theft from CI/CD secrets to broader cloud and AI credentials.