Items tagged with security
Remember the WinRAR path handling exploit we reported on back in August? According to Google, that same flaw, officially dubbed CVE-2025-8088, is still being actively exploited, even though versions of WinRAR newer than v7.12 have been...
Read more...
SoundCloud, best known as a home to indie musicians including the popular "SoundClown" comedy remixers, has been hit with a major data breach that includes the avatars, email addresses, names, usernames, locations, and profile statistics...
Read more...
Beware, a sneaky new variation of the homogaph phishing method is proving yet again that what you see isn't always what you get. Cybercriminals are using a nearly invisible typographical trick to impersonate Microsoft and Marriott websites...
Read more...
Nike confirmed it is investigating a possible data breach that, if verified, could lead to an influx of counterfeit products based on authentic designs. The notorious ransomware gang known as World Leaks claims to have stolen more than 1.4...
Read more...
Like the winter storm currently raging across the United States, a chilling wave of cybersecurity alarms is making the rounds as well. And with over 149 million users impacted across major email providers, Meta-owned Facebook & Instagram...
Read more...
Microsoft has confirmed that it provided BitLocker recovery keys to the FBI in response to a valid legal order, giving investigators the ability to decrypt hard drives that would otherwise have been unreadable. In the case reported by...
Read more...
Update 1/23:
A Google spokesperson reached out to us and provided the following statement on this story: “Based on our current detection, no apps containing this malware are found on Google Play. Android users are automatically protected...
Read more...
A few weeks ago, we covered DarkSpectre, a threat actor responsible for running numerous spyware campaigns that, combined, infected a total of at least 8.8 million Google Chrome, Mozilla FireFox, and Microsoft Edge users. One of the key...
Read more...
Talk about a monumental security lapse: American retail giant Target has found its proprietary source code exposed on the dark web, as current and former employees close to the matter confirm the authenticity of the nearly 900GB data leak...
Read more...
Phishing scammers are getting really good at obtaining your personal information via a sophisticated method called Browser-in-Browser (BitB). To wit, a surge of Facebook BitB attacks are hitting unwitting users, but here's how to detect...
Read more...
The security research team at iVerify Threat Intelligence have discovered a new Remote Access Trojan (RAT) that has been dubbed Cellik, and which is targeting Android users. It includes features typically seen on advanced spyware and...
Read more...
Bah, humbug! Another Google tool has just been sunsetted, as Scrooge McGoogle has announced the immediate wind-down of its 'dark web report' feature, a free tool designed to alert users when their personal information is compromised and...
Read more...
Anyone who owns a modern or even semi-modern iPhone or iPad should stop what they're doing and urgently apply Apple's newly released iOS 26.2 update, as it's packed with over two dozen security patches, including multiple ones that are...
Read more...
The holidays may be upon us, but that isn’t slowing down threat actors. Zimperium’s zlabs research team has discovered a new piece of malware targeting Android users, dubbed DroidLock, that aims to completely hijack a device and enable the...
Read more...
HP Threat Research just issued a new security report detailing a growing trend by attackers towards hijacking session cookies as an alternative means to tried-and-true credential theft. The reason hackers are finding a bigger appetite for sessions cookies is because today's hybrid work...
Read more...
If you have used any of the AI browsers available today, you would likely have been impressed with their ability to automate tasks and act as an intelligent assistant. While these browsers continue to gain popularity, Gartner, a leading...
Read more...
Since the inception of the internet, website and app developers have relied heavily on passwords as a means of protecting user accounts. As hackers continue to develop more sophisticated techniques to circumvent security guardrails...
Read more...
Android users need to be checking their devices for available updates after Google’s recent security bulletin listed 107 security flaws in the mobile operating system, which will be fixed in the security patches of 2025-12-05 or later. Two...
Read more...
Security researchers at Threat Fabric have discovered new malware targeting Android devices, which is still "in a development or limited testing phase." However, even in its current form it’s still incredibly potent, enabling attackers to...
Read more...
It has been a busy year for the Chrome development team, as they've had to contend with several zero-day security flaws. This latest set of vulnerabilities is of particular concern because Google has evidence of one of them being actively...
Read more...
A new wave of state-level proposals targeting virtual private networks has stirred up an unusual amount of alarm from digital-rights groups, and the Electronic Frontier Foundation isn't pulling punches. In a detailed critique published...
Read more...
Update 11/13/25
Hyundai reached out to clarify that the 2.7 million figure floating around refers to the total number of connected vehicles in North America, not the actual number of affected individuals potentially impacted by the...
Read more...
