Users on GitHub are being infected with infostealer malware from a misleading proof-of-concept (PoC) exploit for CVE-2024-49113, also known as LDAPNightmare. Thought to be from SafeBreach Labs’ legitimate PoC, the malicious repository uses a PowerShell script to exfiltrate sensitive data. Cybersecurity firm Trend Micro urges users to verify repositories’ authenticity and rely on trusted cybersecurity companies and researchers.
Hackers target sensitive data from private schools
Hey there, fellow Bay Area folks! I’ve got some intriguing news to share with you today – it’s a real eye-opener for those of us