Information Security News Blog
For many Linux users, software management still evokes associations with console commands, tangled dependency chains, and the constant need to know exactly what to install. Even beginner-friendly distributions like Raspberry Pi OS do not...
Microsoft has confirmed that it is preparing a new Windows 11 build labeled 26H1, though the release is not intended for general distribution. The company clarified that the update introduces no new features but...
Microsoft continues to experiment with new interface features in Windows 11, and this time the spotlight has fallen on haptic feedback — a function long familiar to smartphone users but still rare in the...
Mandiant researchers have uncovered active exploitation of a zero-day vulnerability in the Gladinet Triofox remote access and file-sharing platform. CVE-2025-12480 allowed attackers to bypass authorization and reach configuration pages of the web interface, through...
Spyware applications secretly installed on Android devices continue to pose a stealthy and insidious threat to victims of domestic abuse, intimate partner surveillance, and digital coercion. Despite the presence of built-in protection mechanisms and...
A new tool, DonPwner, has been released publicly — a utility for credential analysis and the automation of attacks against role-based Active Directory environments, built atop the DonPAPI database and designed to streamline authorized...
The Linux Kernel developers are preparing to enable Microsoft C Extensions support during kernel compilation. Two patches recently merged into the kbuild-next development tree introduce the compiler flag -fms-extensions for both GCC and LLVM/Clang,...
A North Korean–linked hacking campaign attributed to the KONNI cluster has executed a string of targeted attacks against Android devices in South Korea, uniquely exploiting the legitimate Google Find My Device service to remotely...
A new open-source project named NoMoreStealers has just debuted on GitHub. Presented as a proof-of-concept defense for Windows systems against data-stealing malware, it is authored by a developer using the pseudonym EvilBytecode. The solution...
SigmaOptimizer is a End-to-End Sigma rule generation and optimization tool that automatically creates, tests, and improves Sigma rules based on real-world logs using LLM. It is implemented as a PowerShell script and integrates log analysis, rule evaluation, and iterative...
The APT-C-60 group, previously linked to targeted attacks against Japanese organizations, continues to employ its signature methods—blending proven tactics with updated technical refinements. In recent months, experts from JPCERT have recorded a new wave...
A new iteration of the RondoDox botnet has been uncovered, exhibiting a dramatic escalation in both scale and technical sophistication. Whereas the original variant described in autumn 2024 exploited only a handful of vulnerabilities...