Author: Mash

Attackers successfully hijacked BGP routing for Softaculous's update infrastructure, redirecting update requests to malicious servers and delivering a tainted Virtualizor [...]

Researchers uncovered 19 malicious extensions for Chrome and Edge that deployed a modular malware framework capable of stealing cryptocurrency, sensitive [...]

The Head Mare hacktivist group has been targeting unpatched TrueConf video conferencing servers by exploiting vulnerabilities tracked as KLCERT-26-057 and [...]

Microsoft has added a new utility called Window Hopper to its PowerToys toolkit, allowing users to switch between windows of [...]

Microsoft is introducing a new Teams meeting policy that automatically blocks all detected external bots from joining, eliminating the need [...]

Microsoft has patched multiple maximum-severity security flaws affecting Entra ID, Azure Arc, Exchange Online, and Azure Managed Instance for Apache [...]

Microsoft has officially removed the legacy WMIC command-line tool from Windows 11 versions 24H2 and 25H2 as part of a [...]

Over 737 Chrome Web Store extensions impersonated legitimate VPN services like Proton VPN, NordVPN, and Cloudflare, redirecting user traffic through [...]

Russian threat group Sandworm, tracked as UAC-0145, has been targeting system administrators since May through fake job offers impersonating IT [...]

A China-linked threat actor tracked as Storm-1175, previously associated with Medusa ransomware, has shifted to deploying a new encryptor called [...]

Researchers from MIT CSAIL have discovered a new Spectre v2 attack technique called TONTOU that bypasses current mitigations on AMD [...]

OpenAI and Anthropic confirmed separate incidents where AI models took unsanctioned actions on the live internet during cybersecurity evaluations. During [...]

CrashStealer is a macOS infostealer disguised as a videoconferencing application called Werkbit Setup, which successfully passed Apple's notarization process, allowing [...]

A critical remote code execution flaw tracked as CVE-2026-61511 affects vBulletin versions 5.x up to 5.7.5 and 6.x up to [...]

Microsoft is prioritizing memory management and performance improvements for the WinUI framework before rewriting core Windows 11 components like the [...]

Hackers have been compromising Wi-Fi gateways at hotels and conference centers since June, redirecting users to fake Microsoft 365 login [...]

The Chaos ransomware gang is using a new Rust-based backdoor called msaRAT that hides command-and-control communication by routing traffic through [...]

A remote code execution vulnerability in 7-Zip tracked as CVE-2026-40087 has been patched in version 26.02, affecting the software's handling [...]

Security researcher Nightmare Eclipse released a Windows zero-day exploit called LegacyHive hours after Microsoft's July 2026 Patch Tuesday, allowing privilege [...]

A malware framework called OkoBot has been active on Windows since April 2025, with a module named SeedHunter that injects [...]

A new macOS information stealer called CrashStealer pretends to be Apple's CrashReporter application, using the tool's name, icon, and metadata [...]

A new RedHook variant abuses Android Wireless Debugging to gain shell-level privileges without requiring a computer connection by tricking victims [...]

Hackers compromised the Injective Labs SDK GitHub repository and published a malicious version 1.20.21 on npm that steals cryptocurrency wallet [...]

Microsoft has released a security patch for a Defender zero-day vulnerability called RoguePlanet, tracked as CVE-2026-50656, which was disclosed by [...]

A campaign reported by Palo Alto Networks' Unit 42 combines phishing emails with Microsoft Teams voice calls impersonating corporate IT [...]

Modern attacks like ClickFix and ConsentFix prey on routine user behaviors, tricking victims into performing actions that compromise their accounts [...]

Researchers at Mozilla's 0DIN platform discovered a technique where seemingly benign GitHub repositories trick AI coding agents into executing malicious [...]

A malicious Microsoft Edge extension called Edgecution has been used in ransomware attacks to escape browser sandboxes by leveraging Chrome's [...]

An ongoing malware campaign targets WhatsApp users across multiple countries with messages containing obfuscated VBScript files disguised as business documents, [...]

A previously undocumented malware botnet called AryStinger has infected more than 4,000 outdated D-Link routers, primarily DIR-850L and DIR-818LW models, [...]

A campaign targeting cryptocurrency users distributes clipboard-stealing malware via LNK shortcut files on USB drives, active since at least February, [...]

TrendAI Research tracked a sustained malvertising campaign from April to June 2026 that used Google Ads to deliver ClickFix social [...]

Researchers have discovered an attack technique called GhostTree that abuses NTFS junctions and symbolic links to hide malware from security [...]

The source code for the Miasma credential-stealing worm, an evolution of the earlier Shai-Hulud malware, was intentionally leaked on GitHub [...]

The Cybersecurity and Infrastructure Security Agency has added a recently patched high-severity vulnerability in SolarWinds Serv-U to its Known Exploited [...]

A threat actor known as DriveSurge operates large-scale malware distribution campaigns by compromising thousands of legitimate websites and redirecting visitors [...]

A critical vulnerability in WP Maps Pro versions 6.1.0 and older, tracked as CVE-2026-8732, allows attackers to create rogue administrator [...]

Palo Alto Networks warns that attackers are exploiting an authentication bypass flaw in PAN-OS GlobalProtect VPN devices, tracked as CVE-2026-0257, [...]

A campaign called LLMShare exploits ChatGPT's content-sharing feature to display fake OpenAI outage notices directing users to download malware disguised [...]

An ongoing cryptojacking operation targets high-performance computers by manipulating search rankings and AI chatbot recommendations to promote malicious download pages [...]