#for


Telegram Mini Apps abused for crypto scams, Android malware delivery

May 3, 2026 // 17:56

Cybersecurity researchers have uncovered a large-scale fraud operation that uses Telegram’s Mini App feature to run crypto scams, impersonate well-known brands, and distribute Android malware. […]

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

May 1, 2026 // 12:52

A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, […]

Popular WordPress redirect plugin hid dormant backdoor for years

Apr 30, 2026 // 01:16

The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago that allows injecting arbitrary code into users’ […]

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)

Apr 29, 2026 // 14:32

Every security team has a version of the same story. The quarter ends with hundreds of vulnerabilities closed. The dashboards are bursting with green. Then […]

Broken VECT 2.0 ransomware acts as a data wiper for large files

Apr 29, 2026 // 00:56

Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to permanently destroying larger files […]

After Mythos: New Playbooks For a Zero-Window Era

Apr 28, 2026 // 13:39

When patching isn’t fast enough, NDR helps contain the next era of threats. If you’ve been tracking advancements in AI, you know the exploit window, […]

Alleged Silk Typhoon hacker extradited to US for cyberespionage

Apr 27, 2026 // 23:37

A Chinese national accused of carrying out cyberespionage operations for China’s intelligence services has been extradited from Italy to the United States to face criminal charges. […]

Canada arrests three for operating “SMS blaster” device in Toronto

Apr 27, 2026 // 23:37

Canadian authorities have arrested three men for operating an “SMS blaster” device that pretends to be a cellular tower to send phishing texts to nearby […]

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren’t Ready for the Remediation Side

Apr 27, 2026 // 14:59

Anthropic’s Claude Mythos Preview has dominated security discussions since its April 7 announcement. Early reporting describes a powerful cybersecurity-focused AI system capable of identifying vulnerabilities […]

New GopherWhisper APT group abuses Outlook, Slack, Discord for comms

Apr 23, 2026 // 15:37

A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate services like Microsoft 365 Outlook, Slack, and Discord in […]

Previous 1 … 23 24 25 26 27 … 31 Next