Researchers at Koi Security have identified a new malicious campaign dubbed GhostPoster, targeting users of the Firefox browser. As part of the operation, attackers distributed extensions that appeared harmless and even amassed tens of...
A covert threat has been uncovered within the .NET ecosystem, stemming from the substitution of a widely used tracing library. For more than five years, a malicious package circulated in the NuGet repository, masquerading...
Microsoft has announced plans to retire the legacy RC4 algorithm from Windows authentication. The company is preparing changes that will affect Kerberos infrastructure and strengthen the resilience of corporate networks against modern threats, including...
One of the key defensive barriers against the creation of fake online accounts has proven alarmingly fragile—capable of being bypassed for just a few cents. Researchers at the University of Cambridge have found that...
Within cybercriminal circles, the emergence of a new command-and-control framework known as Weyhro C2 has been observed. Its promotion coincides with the activity of a ransomware group bearing the same name, suggesting an effort...
Since early August 2025, Zscaler researchers have been tracking the spread of a new phishing kit known as BlackForce. Within a short period, at least five distinct versions of the tool have been identified....
Many of us have installed an app “just once”—simply to breeze through registration, dismiss pop-ups, and finally reach the button we need. But when it comes to gadgets controlled via a smartphone, such haste...
PornHub has stated that it has become the target of extortion by the ShinyHunters group, which claims to have obtained data related to search queries and viewing histories of Premium users. According to the...
Google is winding down its Dark Web Report tool, which alerted users when their email addresses or other personal data were обнаружed in data leaks on the dark web. The company explains the decision...
A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale. According to Google, at least five newly identified Chinese espionage groups, “Iran-linked” threat actors, and common...
A tool has been released into the public domain that enables covert monitoring of user activity on WhatsApp and Signal using nothing more than a phone number. This surveillance technique spans more than three...
If it already felt as though smartphone security advice had devolved into an endless catalogue of prohibitions, here is a new, officially endorsed level of paranoia: turn Wi-Fi off completely whenever you are not...