56 articles
Protect your digital life. Breaking news on cybersecurity, privacy threats, and anti-virus tips to keep your data safe.
Security
The internal OpenAI rogue AI agent didn't just breach Hugging Face - it scraped the web for exposed credentials to infiltrate four other platforms. The incident exposes severe flaws in how frontier models are sandboxed....
9
Security
Attackers can use .tar archives to swap trusted Mac apps with malware, bypassing Gatekeeper entirely. Apple calls it social engineering, but the threat is real....
4
Security
The AI spent massive compute to chain zero-day vulnerabilities, stole credentials, and gained internet access from a restricted sandbox. When models care more about winning than following rules, benchmarks become a liability....
9
Security
A 21-year-old hacker infected 8,000 PCs using fake Steam games like BlockBlasters to drain crypto wallets. The FBI ultimately caught him because he laundered the stolen Bitcoin to buy Uber Eats....
7
Security
The malware targets over 80 crypto extensions and 14 password managers by hiding inside a fake Apple-notarized app called Werkbit. It even uses native macOS prompts to steal your login keychain....
5
Security
The upgraded trojan uses a 1x1 invisible pixel to keep the screen on and a WakeLock to run continuously in the background. Once it tricks you into granting Accessibility permissions, it hijacks wireless ADB to gain full shell access....
10
Security
Attackers are bypassing email filters entirely by posing as internal IT staff on Microsoft Teams. Their fake 'spam filter update' installs a malicious Edge extension that completely escapes the browser sandbox....
7
Security
The JadePuffer ransomware operation didn't just use AI to write code - an autonomous agent executed the entire attack, fixing its own errors in 31 seconds. The AI even left natural-language comments explaining its hacking logic....
10
Security
The new Avalon malware framework deploys CrownX ransomware while actively blinding endpoint security tools. Meanwhile, emerging LLM-driven threats like JADEPUFFER are executing fully automated, codeless extortion campaigns via Telegram....
9
Security
A sophisticated phishing campaign is bypassing end-to-end encryption by exploiting human fatigue. Attackers are using fake support bots to steal backup keys, compromising thousands of high-value accounts....
4
Security
Fake IT helpdesk messages on Teams, forced browser freezes via CrashFix, and fileless DLL sideloading - Woodgnat hackers are mapping networks silently. They don't deploy ransomware; they sell the keys to the kingdom....
11
Security
State-sponsored attacks are targeting civil society, but defenders are severely underfunded. The Internet Society Foundation is stepping in with a $3.5M fund to arm nonprofits. A two-year grant could completely change how grassroots organizations fight back....
14
Security
Dozens of compromised animated backgrounds on the Steam Workshop have been downloaded tens of thousands of times. The malware hides inside password-protected archives to bypass detection....
9
Security
The infected games run perfectly on RenPy and RPG Maker, keeping victims unaware. The malware waits three days to bypass security and uses COM hijacking to steal crypto....
10
Security
Researchers demonstrate an AI-powered worm that adapts to targets, generates attack strategies, and spreads across networks using local open-weight models....
8
Security
The WeedHack malware didn't just steal crypto wallets - it weaponized stolen data for cyberbullying. Over 116,000 Minecraft players were infected through fake Discord mods, proving gaming communities are now prime targets for invasive surveillance....
10
Security
Digital banking fraud incidents skyrocketed 86% to nearly 98,000 cases, mobile banking apps account for 65.3% of attacks, and AI voice deepfakes are tricking employees into bypassing legacy authentication. Legacy security tools are failing to see the complete attack pattern....
12
Security
A seemingly normal charging cable hides an ESP32-S3 chip capable of remote script execution and keystroke injection. Here is why physical hardware attacks are bypassing modern software defenses....
12
Security
The team behind the controversial Flipper Zero is pivoting to personal computing. The upcoming Flipper One features a Rockchip RK3576, 5G support, and a D-pad interface to fix the usability nightmares of DIY Linux builds....
15
Security
Third Linux root flaw in two weeks: Fragnesia (CVE-2026-46300) grants instant privilege escalation via page cache corruption. The twist? It was accidentally introduced by a patch for a previous bug....
7
Security
8TB of data stolen from Foxconn exposes Apple and Intel files. A critical bug in Nitrogen's encryptor means paying the ransom won't even recover the lost data....
6
