Items tagged with security
The ongoing virtual cat-and-mouse game between the FBI and one of the world's most aggressive cybercrime collectives, ShinyHunters, might be coming to an end, thanks to the arrests of key members and seizure of the groups digital...
Read more...
Samsung has unveiled a next-generation tracking device, the Galaxy SmartTag 3, which now boasts smaller dimensions, extended battery life and tracking range, and pet-monitoring capabilities. Plus, it finally welcomes iPhone users to the...
Read more...
Cybersecurity researchers at Kaspersky have uncovered a sneaky new variant of the MacSync malware, revealing a unique tactic where attackers exploit public Apple iCloud calendar events to secretly dump malicious payloads onto macOS...
Read more...
If you, your business, or someone you know rely on the use of WordPress in any way, applying patches immediately is essential to prevent possible compromise by a Remote Code Execution (RCE) attack. To be specific, security company...
Read more...
A notorious extortion group claims to have pulled off one of the most audacious cyberattacks in recent memory by allegedly breaching the Federal Bureau of Investigation and stealing about 3TB worth of records belonging to thousands of...
Read more...
Security researchers at Zimperium’s zLabs are sounding the alarm over a new breed of malware dubbed RatHat, which malicious actors are using to compromise Android devices. While RatHat makes use of tried-and-true approaches at various...
Read more...
Following four intense years of dedicated reverse-engineering, one of the PlayStation 2’s final and most secure hardware components has finally been cracked open.
After 4 years of effort, I'm happy to announce that one of the final...
Read more...
Remember over a year ago when we reported on the ClickFix malware that uses fake CAPTCHA mechanisms to dupe unwitting victims into pwning their own machines? Well, apparently not enough people shared that post, because the problem has...
Read more...
It appears a vulnerability exists within MacOS's WebGPU implementation that can crash a system with a few simple commands, Auberon López (aka @auberonedu on GitHub) revealed this week.
Auberon's day job is as an instructor at the Green...
Read more...
Microsoft broke its previous Patch Tuesday record with yet another record-setter this week. September's Patch Tuesday will contain 974 total fixes, with 113 of them rated "Critical" for high likelihood of exploitation. So far this year...
Read more...
The security research team at Zimperium’s zLabs has uncovered a new strain of malware targeting Android devices, which not only looks to pilfer a victim’s data but also inflict maximum psychological damage. It has been dubbed 'Mantax Otax'...
Read more...
A security flaw in Skullcandy's Dime 3 wireless earphones allows nearby attackers to hijack Bluetooth connections, intercept audio playback, and access built-in microphones without any user interaction or physical confirmation.
To be...
Read more...
Google has begun pushing out Chrome 153 across Windows, macOS, Linux, Android, and iOS, arriving right on the heels of an emergency security patch. This release marks the start of its new two-week major milestone update schedule. First...
Read more...
Keyword smuggling, which is the practice of obfuscating spam keywords to bypass detection filters, has been common practice for quite some time. Microsoft is warning that this traditional tactic has been enhanced by a new-school method of...
Read more...
Google has issued an emergency security update for desktop Chrome users across Windows, Mac, and Linux to address a dozen high- and medium-severity vulnerabilities. One of them is a zero-day flaw that Google confirms is being actively...
Read more...
Microsoft Threat Intelligence has discovered a new variant of the ClickFix malware campaign we covered last year, and it's been dubbed "TerminalFix." The fundamental nature of the attack is similar in the sense that it also relies on false...
Read more...
Federal law enforcement has dismantled a major Chinese state-sponsored cyber-espionage apparatus that targeted critical infrastructure and key government agencies across the United States for nearly eight years. It also makes us wonder...
Read more...
Uh-oh, e-commerce giant AliExpress has been caught running hidden, silent audio processes inside visitors' browsers to generate unique device tracking profiles without user consent.
This naughty deed was uncovered after software...
Read more...
Cybersecurity researchers at Kaspersky have uncovered a malware downloader that targets Android-based automotive head units, marking the first documented case of malicious code explicitly engineered to compromise vehicle infotainment...
Read more...
Municipal public comment periods are usually home to standard local grievances, but a recent San Diego City Council meeting received an Imperial visit when Darth Vader stepped up to endorse Flock cameras and automated surveillance...
Read more...
Researchers from the University of Massachusetts Amherst have uncovered a critical security flaw in contactless payment processing that allows expired credit cards to be reanimated and used for fraudulent purchases.
Presented at the USENIX Security 2026 conference, the UMass researchers...
Read more...
Microsoft nemesis Nightmare-Eclipse is at it again, this time with a bypass exploit for his original RoguePlanet Windows Defender privilege escalation exploit. The new exploit, dubbed ShieldBreak, also allows for elevation of privilege...
Read more...
