infostealer news, stories and analysis

Shai-Hulud worm now scans 469 credential paths: what to rotate

The Shai-Hulud npm infostealer worm expanded from 189 to 469 credential-scanning paths across dev machines, CI/CD, cloud, and AI tool configs after the [email protected] compromise. Rotate everything.

Data Today Security Desk · Sep 5, 2026

Cyber security

AmnesiaStealer turns Mac browsers into live attacker drones

A new macOS infostealer, AmnesiaStealer clones Chromium profiles and gives attackers live control of logged-in browser sessions over CDP.

Data Today Security Desk · Aug 17, 2026

Cyber security

ChainDrop npm worm hits 1,300 packages, steals cloud secrets

A self-propagating npm worm, ChainDrop hit 1,300 packages with 2 billion monthly downloads and stole cloud credentials from CI/CD runners.

Data Today Security Desk · Aug 5, 2026