Updated from BleepingComputer and The Hacker News, with a cleaner reading view that gets to the articles faster.
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password…
Read article
The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned…
Open
Google has been fined €403 million for breaking the EU's data protection law, the GDPR, in the way three of its features handled people's location data…
Open
A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside…
Open
Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts.…
Open
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared under multiple build names,…
Open
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information…
Open
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several…
Open
A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can…
Open
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors…
Open
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated…
Open
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1…
Open