Items tagged with security
by
Chris Harper - Thu, Jan 22, 2026
A new wave of Android click-fraud trojans are in the wild, and they're surprisingly well-hidden. For those familiar with the Android operating system, it's common knowledge that users can enable downloads of third-party applications from...
Read more...
by
Chris Harper - Tue, Jan 20, 2026
A few weeks ago, we covered DarkSpectre, a threat actor responsible for running numerous spyware campaigns that, combined, infected a total of at least 8.8 million Google Chrome, Mozilla FireFox, and Microsoft Edge users. One of the key...
Read more...
by
Aaron Leong - Wed, Jan 14, 2026
Talk about a monumental security lapse: American retail giant Target has found its proprietary source code exposed on the dark web, as current and former employees close to the matter confirm the authenticity of the nearly 900GB data leak...
Read more...
by
Aaron Leong - Tue, Jan 13, 2026
Phishing scammers are getting really good at obtaining your personal information via a sophisticated method called Browser-in-Browser (BitB). To wit, a surge of Facebook BitB attacks are hitting unwitting users, but here's how to detect...
Read more...
by
Alan Velasco - Wed, Dec 17, 2025
The security research team at iVerify Threat Intelligence have discovered a new Remote Access Trojan (RAT) that has been dubbed Cellik, and which is targeting Android users. It includes features typically seen on advanced spyware and...
Read more...
by
Aaron Leong - Tue, Dec 16, 2025
Bah, humbug! Another Google tool has just been sunsetted, as Scrooge McGoogle has announced the immediate wind-down of its 'dark web report' feature, a free tool designed to alert users when their personal information is compromised and...
Read more...
by
Paul Lilly - Sat, Dec 13, 2025
Anyone who owns a modern or even semi-modern iPhone or iPad should stop what they're doing and urgently apply Apple's newly released iOS 26.2 update, as it's packed with over two dozen security patches, including multiple ones that are...
Read more...
by
Alan Velasco - Thu, Dec 11, 2025
The holidays may be upon us, but that isn’t slowing down threat actors. Zimperium’s zlabs research team has discovered a new piece of malware targeting Android users, dubbed DroidLock, that aims to completely hijack a device and enable the...
Read more...
by
Paul Lilly - Thu, Dec 11, 2025
HP Threat Research just issued a new security report detailing a growing trend by attackers towards hijacking session cookies as an alternative means to tried-and-true credential theft. The reason hackers are finding a bigger appetite for sessions cookies is because today's hybrid work...
Read more...
by
Victor Awogbemila - Tue, Dec 09, 2025
If you have used any of the AI browsers available today, you would likely have been impressed with their ability to automate tasks and act as an intelligent assistant. While these browsers continue to gain popularity, Gartner, a leading...
Read more...
by
Victor Awogbemila - Wed, Dec 03, 2025
Since the inception of the internet, website and app developers have relied heavily on passwords as a means of protecting user accounts. As hackers continue to develop more sophisticated techniques to circumvent security guardrails...
Read more...
by
Alan Velasco - Tue, Dec 02, 2025
Android users need to be checking their devices for available updates after Google’s recent security bulletin listed 107 security flaws in the mobile operating system, which will be fixed in the security patches of 2025-12-05 or later. Two...
Read more...
by
Alan Velasco - Thu, Nov 20, 2025
Security researchers at Threat Fabric have discovered new malware targeting Android devices, which is still "in a development or limited testing phase." However, even in its current form it’s still incredibly potent, enabling attackers to...
Read more...
by
Alan Velasco - Tue, Nov 18, 2025
It has been a busy year for the Chrome development team, as they've had to contend with several zero-day security flaws. This latest set of vulnerabilities is of particular concern because Google has evidence of one of them being actively...
Read more...
by
Zak Killian - Sat, Nov 15, 2025
A new wave of state-level proposals targeting virtual private networks has stirred up an unusual amount of alarm from digital-rights groups, and the Electronic Frontier Foundation isn't pulling punches. In a detailed critique published...
Read more...
by
Paul Lilly - Wed, Nov 12, 2025
Update 11/13/25
Hyundai reached out to clarify that the 2.7 million figure floating around refers to the total number of connected vehicles in North America, not the actual number of affected individuals potentially impacted by the...
Read more...
by
Alan Velasco - Mon, Nov 10, 2025
Security researchers have found several alarming security flaws in tooling used by containerization tool Docker that allows attackers to attack the host machine. The flaws specifically relate to runC, which Docker describes as the...
Read more...
by
Paul Lilly - Fri, Nov 07, 2025
There's still about seven and a half weeks remaining in 2025, but a new study already has a beat on the worst passwords of the year, with the most awful of the bunch appearing more than 7.6 million times in various data breaches. Suffice...
Read more...
by
Paul Lilly - Thu, Nov 06, 2025
The industry-wide effort to AI all the things isn't without its seedy side. Namely, we're quickly entering an era of more sophisticated malware strains evading common antivirus protections, with threat actors taking advantage of powerful...
Read more...
by
Alan Velasco - Mon, Oct 27, 2025
Just weeks after a breach led to the theft of sensitive user data that included government issued IDs, Discord users have a new cybersecurity issue to worry about. Security researchers at Netskope have spotted hackers repurposing an open...
Read more...
by
Chris Harper - Tue, Oct 14, 2025
Android users beware—a new form of Android malware dubbed Pixnapping has been revealed to the public, and in theory, all current Android devices running Android 13 or newer are vulnerable since "the core mechanisms enabling the attack are...
Read more...
by
Aaron Leong - Fri, Oct 10, 2025
A financially-motivated hacking group, tracked by Microsoft as Storm-2657, has so far successfully compromised employee accounts at three U.S. universities to steal their salaries in what campaign experts are deeming "payroll pirate"...
Read more...