A new scheme for distributing malicious links through browser push notifications is rapidly gaining traction and drawing the attention of security specialists. It is built upon the Matrix Push C2 platform, designed to covertly...
Israel’s NSO Group is attempting to overturn a ruling by a California federal court that ordered the company to cease using WhatsApp’s infrastructure to deliver its Pegasus spyware. The legal dispute has dragged on...
A large-scale TamperedChef campaign has once again drawn the attention of security researchers, as attackers continue distributing malware through counterfeit installers of popular applications. This method of disguising malicious payloads as familiar software enables...
Unwanted programs disguised as gaming software have once again drawn the attention of cybersecurity researchers. The Tsundere botnet, which surfaced this past summer, has been steadily expanding its reach, targeting Windows users through an...
Google has disclosed a years-long intelligence operation revealing that APT24, a China-linked threat group, had been deploying a previously unknown malicious tool called BadAudio. The campaign stretched across three years, gradually shifting toward more...
A widespread infection of outdated ASUS routers has become the focal point of a new covert campaign that quietly unfolded over the past six months, compromising tens of thousands of devices across the globe....
A new wave of attacks targeting infrastructure built around modern machine-learning systems has been uncovered by the Oligo Security team. Researchers found that a group of threat actors has launched a large-scale operation, dubbed...
A debate over privacy has once again ignited around several budget Samsung smartphones. The controversy stems from the system service AppCloud, preinstalled on Galaxy A, M, and F devices in certain regions. This component...
The Xubuntu team has released detailed information about the October incident during which the downloads page at https://xubuntu.org/download/ distributed a malicious file for several days instead of the usual torrent links. According to the...
Cybersecurity experts have detailed a newly identified Android banking trojan called Sturnus, engineered to steal credentials and seize full control of a device—granting attackers the ability to conduct financial fraud with virtually no involvement...
Over the past quarter, the ransomware ecosystem has entered a new phase that markedly reshapes its familiar balance of power. Where the market once revolved around large, entrenched operators with stable infrastructures, it has...
One of the largest supply-chain attacks ever recorded in the npm ecosystem has been uncovered, marking a historic event for open-source repositories. According to Amazon’s researchers, the registry faced an unprecedented “flooding” of packages...
