BBC journalist Joe Tidy found himself entangled in a scenario that ordinarily lurks in the shadows of the cybercriminal world. In July he received an unexpected Signal message from an unknown interlocutor identifying himself...
A new Android banking trojan known as Klopatra has infected more than three thousand smartphones within just a few weeks, the majority of which are located in Spain and Italy. The malware was discovered...
Red Hat, the American developer of enterprise Linux solutions, has confirmed a cybersecurity incident shortly after a group calling itself Crimson Collective claimed responsibility for stealing nearly 570 GB of data from the company’s...
CERT-UA has detected a new targeted campaign against Ukraine in which operators distribute malicious XLL modules inside ZIP archives via the Signal messenger, ultimately delivering the CABINETRAT backdoor to victims’ machines. The agency attributes...
The Chinese company Anker, maker of Eufy security cameras, launched an unusual campaign in late 2024: it offered users cash in exchange for video recordings of package thefts and attempted car break-ins. As reported...
The French cybersecurity firm SEKOIA has uncovered a smishing campaign in which attackers exploit vulnerabilities in Milesight industrial 4G/5G routers to distribute phishing SMS messages across several European countries. According to the report, adversaries...
Google has released the stable version of Chrome 141.0.7390.54/55 for Windows, macOS, and Linux. The update will roll out over the coming days and weeks, addressing 21 security vulnerabilities of varying severity — including...
The head of Instagram, Adam Mosseri, has decided to publicly dispel a long-standing myth: that Meta secretly activates users’ microphones and eavesdrops on their conversations in order to deliver more precise advertising. This notion...
Researchers from Johns Hopkins University and several other institutions have demonstrated a novel, server-side attack against Intel SGX that achieves full extraction of the DCAP attestation key — notably using hardware costing under $1,000....
A newly identified cyber-espionage group, Phantom Taurus, linked to China, has spent the past two and a half years striking government bodies and telecommunications firms across Africa, the Middle East, and Asia. According to...
Researchers at Varonis have reported the emergence of a new toolkit named MatrixPDF, which enables attackers to transform ordinary PDF files into interactive phishing lures. These maliciously crafted documents can bypass email security filters...
Researchers at Tenable have disclosed three vulnerabilities in Google’s Gemini AI, flaws that enabled data theft and remote exploitation. Collectively dubbed the “Gemini Trifecta,” these issues affected distinct modules of the assistant. The first...
