Researchers at Calif developed the first zero-click worm for WeChat. This WeChat zero-click worm spreads through automated calls across iOS and Android platforms. Tencent has already mitigated this critical threat on their servers. Why...
Apple has, for the first time in a considerable epoch, yielded to the entreaties of its patrons by resurrecting security fortifications for an ancestral iteration of its operating system—one many had already relegated to...
An unidentified entity has unleashed upon GitHub a nascent iteration of DarkSword—a formidable cybernetic armament that, merely a week prior, was wielded in meticulously targeted sieges against iPhone proprietors. This hemorrhage of classified code...
Direct navigation—when a user manually types a website address into the browser—has become markedly more dangerous. Researchers at Infoblox have found that the vast majority of “parked” domains are now configured to automatically funnel...
Israel’s NSO Group is attempting to overturn a ruling by a California federal court that ordered the company to cease using WhatsApp’s infrastructure to deliver its Pegasus spyware. The legal dispute has dragged on...
Google has issued an urgent warning about a critical vulnerability in Android that allows attackers to execute arbitrary code on a device without any user interaction. The zero-click vulnerability, found in core system components,...
The Google Project Zero team has disclosed a critical vulnerability in the Dolby DDPlus Unified Decoder that permits remote arbitrary code execution on Android devices without any user interaction. Tracked as CVE-2025-54957, the flaw...
Apple has significantly expanded its bug bounty program dedicated to strengthening the security of the iOS ecosystem. At the Hexacon offensive security conference in Paris, Ivan Krstić, Apple’s Vice President of Security Engineering and...
In June 2025, a researcher operating under the pseudonym rick disclosed a critical vulnerability in GitHub Copilot dubbed CamoLeak, rated CVSS 9.6. The flaw enabled an attacker to surreptitiously exfiltrate sensitive information and source...
OpenAI has patched a critical vulnerability known as ShadowLeak, which allowed its cloud-based agent Deep Research to silently siphon personal data from connected sources and exfiltrate it to external servers—even without the victim opening...
On August 20, Apple released an unscheduled security update for all major platforms—iOS, iPadOS, macOS, and others. The patch addresses CVE-2025-43300, a buffer overflow vulnerability in the ImageIO framework, by enforcing stricter boundary checks...
WhatsApp has patched a vulnerability in its iOS and macOS client applications that had been actively exploited in zero-day targeted attacks. The flaw enabled a “zero-click” scenario, requiring no interaction from the victim. According...
