https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Slack.Sun, 26 Jul 2026 22:32:52 GMThttps://elastic.co/security-labs/contagious-interview-malware-svg-steganographycst-2774Elastic Security Labs discovered a North Korean-aligned campaign, tracked as REF9403, that uses fake job postings and coding challenges to distribute malware hidden in SVG image files via steganography. The trojanized code repositories appear functional but install a four-stage payload including credential and wallet stealers, file exfiltration, a Socket.IO-based remote access trojan, and clipboard stealing capabilities. The campaign demonstrates how threat actors target developers to establish initial access for downstream supply chain attacks.Sat, 18 Jul 2026 00:00:00 GMThttps://tenable.com/blog/claude-tag-slack-access-modelcst-2608Anthropic's Claude Tag is a Slack AI agent that operates using admin-configured shared credentials rather than individual user credentials, following a service-identity pattern similar to deploy bots and workflow automations. Access to connected services is controlled by admin-configured bundles at the workspace or channel level, with organization-wide controls governing who can direct the agent. Channel members can collaborate with Claude, but their participation does not grant new permissions beyond what the admin bundle defines.Wed, 15 Jul 2026 15:08:00 GMThttps://sentinelone.com/labs/cloud-worm-evicts-teampcp-and-steals-credentials-at-scalecst-606SentinelLABS discovered PCPJack, a credential theft worm that targets exposed cloud infrastructure including Docker, Kubernetes, Redis, and MongoDB, while removing artifacts from the TeamPCP threat actor group. The framework harvests credentials from cloud services, containers, developer tools, and financial applications, then spreads to additional hosts via a dropper script that downloads Python-based modules from attacker-controlled infrastructure. Unlike typical cloud malware, PCPJack does not deploy cryptominers, instead suggesting monetization through credential fraud, spam campaigns, extortion, or resale of stolen access.Thu, 07 May 2026 10:00:17 GMThttps://recordedfuture.com/blog/kyle-kohler-product-managercst-1985Recorded Future, a threat intelligence provider, featured a profile of Kyle Kohler, a Senior Product Manager for Integrations. Kohler describes the role as multifaceted, involving strategic initiative planning, translating customer feedback into product improvements, and enabling team collaboration across a global organization covering cyber, geopolitical, and payment fraud intelligence domains.Fri, 03 Apr 2026 00:00:00 GMThttps://wiz.io/blog/slack-ai-app-for-wiz-integrationcst-1488Wiz announced new artificial intelligence (AI) capabilities for Slack alongside a bi-directional integration that allows security teams to investigate and respond to risks directly within the Slack platform. The enhancement brings risk assessment and remediation workflows into the collaboration tool where teams already communicate.Thu, 06 Mar 2025 14:08:04 GMT