Six Flaws in AirDrop and Quick Share Enable Nearby Service Crashes
Six security flaws in AirDrop and Quick Share let nearby attackers crash file sharing services and bypass session protections across billions of Apple and Android devices.
The Latest
OpenAI Launches GPT-5.6 Family and ChatGPT Work Agentic Platform
OpenAI's GPT-5.6 models demonstrate improved vulnerability discovery capabilities, while the companion ChatGPT Work platform introduces enterprise security considerations for agentic…
Macs Hit by Odyssey Stealer Targeting Over 100 Countries and 300 Crypto Wallet Extensions
This malware campaign uses deceptive software prompts to steal sensitive data from Macs across more than 100 countries.
Ghost Account Army: How Hackers Weaponized Dormant GitHub Profiles for Corporate Espionage
Attackers are using networks of dormant GitHub accounts to map corporate development teams and steal source code.
AI Accelerated Cloud Intrusion: Full AWS Compromise in 72 Hours
AI assisted attackers exploited stolen credentials and cloud misconfigurations to chain overlapping attack waves across AWS environments, compressing traditional intrusion…
Global Police Operation Nets 5,800 Suspects in Major Fraud Crackdown
A global operation across 97 countries arrested over 5,800 suspects and seized $293 million in assets linked to social engineering…
Internal Conflict Leads to Sabotage Attempt in OpenMandriva Linux Project
A contributor to the OpenMandriva Linux project deleted years of repository work and pushed a potentially harmful empty package after…
New PhaaS Platform Forg365 Uses AI and Dual Attack Methods to Target Microsoft 365 Users
The Forg365 phishing platform combines adversary-in-the-middle and device-code attack methods with AI-assisted lure creation and a cookie-stealing browser extension for…
Cryptocurrency wallet theft via compromised npm SDK package
Attackers compromised a GitHub contributor account to inject malware that steals cryptographic credentials from developers building on the Injective blockchain.
Microsoft Deploys AI Agent Fleet to Hunt Windows Vulnerabilities at Scale
MDASH uses over 100 AI agents to scan critical Windows binaries, achieving 100% recall on some historical vulnerabilities and finding…
GodDamn Ransomware Variant Uses Signed Kernel Driver to Evade Detection
The GodDamn ransomware variant uses a signed PoisonX kernel driver to disable endpoint protection at the operating system level before encryption begins.
Fancy Bear Uses PNG Steganography for Fileless C# Backdoor Deployment
The advanced persistent threat group uses steganography to conceal shellcode in image pixels, then loads a C# backdoor entirely in…
Phishing Attack Weaponizes AnyDesk to Establish Persistent Remote Access
Attackers use password-protected archives and legitimate software like AnyDesk to evade detection while targeting Russian aerospace organizations for espionage.
Authorities Dismantle Massive Residential Proxy Botnet
A joint law enforcement operation has dismantled the NetNut botnet, which hijacked millions of consumer devices to route malicious traffic…
Spotlight
Ubiquiti Patches Seven Critical Vulnerabilities Across UniFi Product Line
Ubiquiti released patches for seven critical flaws across its UniFi product line, including a command injection vulnerability rated CVSS 10.0.
HalluSquatting Exploits AI Hallucinations to Distribute Botnet Malware
The HalluSquatting technique allows attackers to poison AI coding assistants by registering fake resources that LLMs hallucinate, enabling remote code execution and botnet creation.
New EU Mandate for Driver Monitoring Raises Biometric Privacy Concerns
New EU regulations requiring driver monitoring cameras in all vehicles spark privacy and security debates over biometric data collection and potential misuse.
Cyberattack on Mount Royal University Leads to Data Theft and System Disruption
Mount Royal University revealed that attackers stole data from student and employee file storage drives and wiped additional departmental data, prompting an ongoing recovery effort.
Features
KDDI Hack Exposes 12 Million Email Accounts via Zero Day in Third Party Software
KDDI confirmed that attackers exploited a previously unknown flaw in third party software to steal login credentials from five Japanese…
Malicious Payment SDK Packages Target Developers on NPM and PyPI
Seventeen counterfeit SDK packages on NPM and PyPI impersonate Paysafe, Skrill, and Neteller libraries to steal credentials from developer environments.
Telegram Based RedWing Malware Kit Enables No Skill Bank Fraud
A Telegram based malware rental service called RedWing lets criminals build custom Android banking trojans on demand, bypassing the need…
GitHub Verification Badge Can Be Bypassed by Rewriting Commit Signatures
An attacker can rewrite a signed Git commit's hash without changing its content or breaking its verified badge, undermining hash…
DuckDuckGo Browser Builds Native YouTube Ad Blocker Using Open Source Filter Lists
DuckDuckGo's browser now strips YouTube video ads by default using open source filter lists and proprietary rules.
Fake Google CAPTCHA Lures Mexican Bank Customers Into Banking Trojan Attack
The SCMBANKER malware toolkit uses a fake Google CAPTCHA page to trick Mexican bank customers into running a command that…
