Google has issued an urgent warning about a critical vulnerability in Android that allows attackers to execute arbitrary code on a device without any user interaction. The zero-click vulnerability, found in core system components,...
In mid-autumn 2025, researchers at Cyble and Seqrite Labs observed a new wave of targeted malicious activity dubbed Operation SkyCloak. According to their findings, an unidentified threat actor has been conducting a phishing campaign...
Google has developed an artificial intelligence system called Big Sleep, which is already proving valuable in the field of cybersecurity. This week, Apple formally thanked the company for identifying five vulnerabilities in WebKit, the...
Microsoft has uncovered a new strain of malware, dubbed SesameOp, and released detailed findings on its operation. This backdoor stands out for its unconventional design: its creators leveraged the OpenAI Assistants API as a...
Cybercriminals have discovered a way to exploit digital tools to steal tangible goods from trucks and warehouses. According to researchers at Proofpoint, since the beginning of 2025, an active criminal group has been targeting...
Hackers have breached the DeFi protocol Balancer, stealing over $120 million worth of cryptocurrency. Analysts estimate that roughly $99 million of the stolen assets were in Ether (ETH). The incident, which occurred in the...
South Korea’s largest mobile carrier, SK Telecom, has reported a dramatic decline in operating profit for the third quarter — nearly 90% lower than in 2024. The company attributed the plunge to costs stemming...
Former employees of the U.S.-based company DigitalMint, which specialized in negotiating with hackers on behalf of ransomware victims, have themselves been implicated in conducting cyberattacks. The U.S. Department of Justice has charged them with...
Peter Williams, former chief executive of Trenchant—a division within the defense contractor L3Harris—has recently pleaded guilty to stealing and selling classified cyber-espionage tools to a foreign intermediary. Court documents and a TechCrunch investigation have...
FortiGuard’s mid-year report for 2025 reveals that financially motivated attackers are increasingly eschewing complex exploits and bespoke malware. Rather than deploying heavy toolsets, they rely on legitimate accounts and authorized remote-access applications to slip...
Experts from Palo Alto Networks Unit 42 have described a new attack vector targeting multi-agent systems, known as agent session smuggling — a technique in which a malicious remote agent embeds hidden instructions during...
The story of one of the most notorious cyberthreats of the past decade has taken an unexpected turn. The developer behind the ZeroAccess botnet—which once infected millions of devices across the globe—has resurfaced years...
