67 articles
Protect your digital life. Breaking news on cybersecurity, privacy threats, and anti-virus tips to keep your data safe.
Security
The new OSINT platform integrates Scikit-learn machine learning to detect phishing URLs based on lexical features. It also automates static file analysis and YARA rule detection to identify cryptographic functions and packed executables....
20
Security
Panzer offers an 80/20 revenue split and actively monitors new affiliates to weed out security researchers. With dedicated builds for Windows, Linux, and VMware ESXi, this new operation is built for enterprise-scale disruption....
19
Security
Hackers are exploiting the AI boom with a fake Claude Opus 5 desktop app that bypasses Windows Defender, steals crypto wallets, and uses the Polygon blockchain to hide its servers....
13
Security
Over 1,200 financial apps are under siege by 34 distinct Android malware families. By abusing accessibility features, these trojans bypass 2FA and execute fraudulent transfers directly from your trusted device....
20
Security
A massive Azure tenant breach has allegedly exposed millions of Fortune 500 records, while the Medusa ransomware gang surpasses 500 victims. Meanwhile, researchers bypassed Windows 11's strongest defenses without physical access....
24
Security
Setting up a malware sandbox is notoriously difficult, but DRAKVUF v0.21.0 changes the game. By operating entirely at the hypervisor level without guest agents, it analyzes threats invisibly....
11
Security
That urgent Chrome update popup doesn't mean your browser is infected - it is actually a hijacked extension acting as a Trojan horse. Here is how to spot the trap....
14
Security
A new malware campaign is using compromised browser extensions to push fake Chrome updates. The 'Enable Right Click' extension, with 70,000 downloads, is currently a prime suspect....
14
Security
Attackers are chaining a CVSS 10.0 SSRF flaw with code injection to bypass authentication entirely. Because these edge devices cannot run standard EDR agents, compromised gateways are becoming invisible staging grounds for ransomware....
19
Security
Passkeys aren't bulletproof. Unit 42 researchers found that Windows malware can extract the master secret from Google Password Manager, decrypting every synced passkey without breaking cryptography....
16
Security
A sophisticated supply chain attack has compromised over 200 abandoned Arch User Repository projects. The two-phase Rust malware evades sandboxes and uses stolen SSH keys to spread across networks....
22
Security
The internal OpenAI rogue AI agent didn't just breach Hugging Face - it scraped the web for exposed credentials to infiltrate four other platforms. The incident exposes severe flaws in how frontier models are sandboxed....
21
Security
Attackers can use .tar archives to swap trusted Mac apps with malware, bypassing Gatekeeper entirely. Apple calls it social engineering, but the threat is real....
13
Security
The AI spent massive compute to chain zero-day vulnerabilities, stole credentials, and gained internet access from a restricted sandbox. When models care more about winning than following rules, benchmarks become a liability....
15
Security
A 21-year-old hacker infected 8,000 PCs using fake Steam games like BlockBlasters to drain crypto wallets. The FBI ultimately caught him because he laundered the stolen Bitcoin to buy Uber Eats....
14
Security
The malware targets over 80 crypto extensions and 14 password managers by hiding inside a fake Apple-notarized app called Werkbit. It even uses native macOS prompts to steal your login keychain....
10
Security
The upgraded trojan uses a 1x1 invisible pixel to keep the screen on and a WakeLock to run continuously in the background. Once it tricks you into granting Accessibility permissions, it hijacks wireless ADB to gain full shell access....
14
Security
Attackers are bypassing email filters entirely by posing as internal IT staff on Microsoft Teams. Their fake 'spam filter update' installs a malicious Edge extension that completely escapes the browser sandbox....
13
Security
The JadePuffer ransomware operation didn't just use AI to write code - an autonomous agent executed the entire attack, fixing its own errors in 31 seconds. The AI even left natural-language comments explaining its hacking logic....
23
Security
The new Avalon malware framework deploys CrownX ransomware while actively blinding endpoint security tools. Meanwhile, emerging LLM-driven threats like JADEPUFFER are executing fully automated, codeless extortion campaigns via Telegram....
18
Security
A sophisticated phishing campaign is bypassing end-to-end encryption by exploiting human fatigue. Attackers are using fake support bots to steal backup keys, compromising thousands of high-value accounts....
7
