News

The article discusses the FlutterShell backdoor that is spreading to macOS through malicious Google and YouTube ads. Malvertising continues to be a prevalent threat as attackers exploit popular platforms to deliver harmful software. The piece emphasizes the…

A recent cybersecurity alert highlights the active DriveSurge threat cluster, a sophisticated operation compromising numerous websites through various malicious tactics. This Initial Access Broker (IAB) uses a Pay-Per-Install model, employing a Traffic…

The article discusses a multi-faceted cyber espionage campaign executed by the Russia-linked APT group, Gamaredon, targeting Ukraine. The group has exploited a vulnerability in WinRAR (CVE-2025-8088) to deploy modular, fileless malware, which operates…

Law enforcement and tech companies recently disrupted over 1.4 million accounts involved in scam networks across Southeast Asia, as part of 'Disruption Week.' This initiative, led by the US Department of Justice's Scam Center Strike Force and various…

The article discusses the emergence of fake websites that mimic popular open-source tools to deliver malware through Traffic Distribution Systems (TDS). These fraudulent sites often rank highly on search engines, masking malicious intentions behind familiar…

Hackers gained access to a stock exchange executive's Outlook mailbox, successfully monitoring their communications for five months. This incident highlights concerns about cyber espionage and the vulnerability of email systems to unauthorized access,…

The article discusses strategies for businesses to prepare for a cybersecurity crisis, highlighted during Infosecurity Europe 2026. Key points include: 1. **Crisis Playbook**: Organizations should have a concise playbook that outlines the type of crisis, the…

A security researcher, Ammar Askar, has publicly disclosed a zero-day vulnerability in Visual Studio Code (VS Code) after losing trust in Microsoft’s bug reporting process. The exploit enables attackers to steal GitHub tokens through a flaw in github.dev,…

A critical cybersecurity alert discloses a coordinated Microsoft Teams vishing attack targeting corporate organizations, particularly in the legal sector. The attack employs a combination of email harassment and voice phishing to trick employees into…

Meta's AI support bot was exploited by hackers to gain access to Instagram accounts by manipulating the password reset feature. Attackers would impersonate account owners, prompting the bot to change email addresses linked to these accounts without proper…

The article discusses insights shared by Dmytro Kuleba, former Ukrainian foreign minister, at Infosecurity Europe regarding the need for preparation, resilience, and self-reliance in cybersecurity, especially in light of Ukraine's experiences during the war…

Security researchers from the Seqrite APT Team have identified a highly targeted cyber espionage campaign named Operation Dragon Weave, which affects public institutions in the Czech Republic and Taiwan. The campaign employs deceptive phishing techniques,…

A severe vulnerability has been disclosed in Visual Studio Code (VS Code) that allows attackers to steal a user's GitHub token, potentially granting access to their repositories. The vulnerability, found by researcher Ammar Askar, is exploitative through a…

The article discusses the urgent need for organizations to accelerate the transition to post-quantum cryptography (PQC) in light of growing security concerns regarding quantum computing. Key points include: 1) Only 8% of SSH servers currently support PQC,…

CISA has added an exploited Remote Code Execution (RCE) vulnerability in Magento, identified as CVE-2026-45247, to its Known Exploited Vulnerabilities (KEV) Catalog. The update emphasizes the vulnerability's active exploitation in the wild, which heightens…

The article discusses the rising security concerns related to vulnerabilities in AI-generated code, particularly within systems using the Model Context Protocol (MCP). Recent findings show that AI code contributions have increased significantly, creating a…

Operation KRATOS, coordinated by Europol and involving 13 countries, dismantled nine illegal streaming crime groups and resulted in 29 arrests over seven months from September 2025 to April 2026. Key actions included the removal of over 27,000 illegal…

The article discusses the recent release of Microsoft's Coreutils for Windows, which provides a collection of Unix-like commands for Windows users. Didier Stevens, the author, shares his experience with GnuWin32 CoreUtils and highlights that Microsoft's…

The page discusses a significant law enforcement operation by the U.S. Department of Justice that disrupted cryptocurrency fraud networks in Southeast Asia, resulting in the freezing of $3.8 million in assets. This operation is part of a broader effort to…

A recent cybersecurity alert discusses a sophisticated cyber espionage operation leveraging a Steam profile malware campaign. This campaign targets website infrastructure and evades detection via invisible Unicode steganography, embedding malicious payloads…

Google has launched the Gemma 4 12B, a compact multimodal AI model that operates on standard devices with only 16GB of memory. Key features include: Unified processing of text, images, video, and audio without separate encoders. Performance comparable to…

Google has introduced granular consent frameworks allowing webmasters to opt out of its AI Overviews feature, which utilizes website content for direct answers in search results. This change aims to protect publishers from losing referral traffic and revenue…

A Pakistani advanced persistent threat (APT) group has been conducting espionage against the Afghan Ministry of Finance using a malware known as Xeno RAT. This operation involves a series of phishing attacks utilizing malicious emails that target Afghan…

A self-replicating worm is spreading through the npm registry via a new technique involving a 'binding.gyp' file, which silently triggers malicious code during installation without being detected by traditional security tools. The worm, identified by…

Security teams have identified severe vulnerabilities in the popular React Router framework, affecting millions of applications globally. The critical issues include: 1. **Remote Code Execution**: A particularly dangerous vulnerability, CVE-2026-42211,…

A critical security alert has been issued regarding vulnerabilities in Acer's Connect W6x devices. The advisories highlight urgent firmware updates due to two serious flaws: CVE-2026-49197, which allows authentication bypass through poor HTTP handling, and…

A serious vulnerability has been identified in Apache Airflow, referenced as CVE-2026-45360, which involves a flaw in the scheduler's decoding mechanism for custom serialization tasks. This defect allows untrusted code to be executed without appropriate…

A critical vulnerability, tracked as CVE-2026-9051, has been identified in National Instruments' SystemLink application, allowing unauthenticated attackers to exploit authentication bypass to access restricted systems. This flaw poses a high CVSS score of…

The content provides an update for the ISC Stormcast on June 4, 2026, featuring handler Johannes Ullrich. The threat level is currently green, indicating a low risk. The page includes links to various resources, including classes taught by Ullrich for SANS,…

A critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin allows unauthenticated attackers to execute arbitrary PHP code, potentially compromising entire websites. This flaw is linked to an input validation error within the plugin’s…

The content discusses critical vulnerabilities found in the Axios JavaScript library, specifically CVE-2026-44492 and CVE-2026-44494, which can allow attackers to bypass network rules and intercept web traffic. One vulnerability involves a patch for proxy…

Overview of the Security Threat Mautic has released urgent security updates to address dangerous software flaws in its

Sophos X-Ops analysts reported that an unidentified threat actor is using AI to automate evasion techniques for endpoint detection and response (EDR) systems. The attackers developed malware testing environments that employ Python scripts, some AI-generated,…

Dashlane issued a security advisory stating that an external party executed a brute force attack against user accounts, obtaining access to 20 encrypted vaults. The attack aimed to bypass two-factor authentication (2FA) methods. Users expressed confusion…

China-linked espionage groups have targeted at least a dozen nations in Latin America, focusing on geopolitical interests such as maritime shipping and oil production. Notable state-sponsored threats include the Chinese APT groups FamousSparrow and…

A recent article highlights a cybersecurity vulnerability affecting Google Gemini on Android devices related to notifications from WhatsApp and Slack. This vulnerability has serious implications for user privacy and data security.

Cyber insurance policies are becoming more affordable, but coverage exclusions are increasing, causing potential surprises for customers. Key points discussed at the Gartner Security & Risk Management Summit include: 1. Prices for policies are stabilizing,…