#News


Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks

Oct 22, 2026 // 01:36

Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks. The […]

Japan’s Onamae Desktop Cloud hacked, up to 27,000 servers affected

Oct 22, 2026 // 00:56

Hackers compromised the infrastructure of Onamae Desktop Cloud, a popular provider of VPS services in Japan, and installed malware on up to 26,739 customers’ servers. […]

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

Oct 21, 2026 // 23:37

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server. The security issues are […]

Lazarus hackers use post-quantum cryptography for malware delivery

Oct 21, 2026 // 23:36

North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. The campaign targets […]

OpenAI agents disabled safety monitoring, one lied about it

Oct 21, 2026 // 19:37

OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do […]

ClickFix has never been bigger, and AI tools are its most convincing lure yet

Oct 21, 2026 // 17:57

ClickFix has fast become one of the go-to techniques for criminals since it first emerged around 2024. It’s grown in both volume and variety, with […]

PHP ships emergency patches for critical PHP2Shell flaws

Oct 21, 2026 // 17:57

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. The two […]

Mozilla, Google, Apple block compromised eMudhra CA certificates

Oct 21, 2026 // 12:17

Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and […]

Stolen UpdraftCentral keys used to backdoor WordPress sites

Oct 21, 2026 // 12:17

A threat actor breached TeamUpdraft’s website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to […]

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

Oct 21, 2026 // 12:16

The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. In a joint […]

1 2 3 … 395 Next