FBI Disrupts China-Linked QTFY Hacking Platforms The U.S. Department of Justice (DoJ) announced on Wednesday the disruption of two hacking platforms—QScan and QTRouter—operated by Chinese threat...
Passkeys Go Multi-Device WhatsApp has quietly changed how you prove who you are when logging in. The Meta-owned messaging app announced Tuesday that it now supports...
The Patch Is a Confession Every patch is a confession. The moment a vendor ships a security fix, the diff between the old code and the...
Attackers Are Already Knocking on Your Login Page If your WordPress site runs the MiniOrange SAML 2.0 Single Sign-On plugin, there’s a good chance someone has...
The Attack Chain Nobody Saw Coming There’s a nasty trick lurking in the way modern AI agents read your screen. An Android app that can draw...
FakeGit: A Massive Malware Distribution Network on GitHub Cybersecurity researchers have uncovered a sprawling malware distribution campaign that has infected nearly 7,600 GitHub repositories. Dubbed FakeGit,...
Dutch Intelligence Lifts the Lid on a Silent Surveillance Campaign At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine....
Dutch Regulator Slaps Uber With Record Fine Over Automated Account Bans Uber is facing a staggering bill after Dutch data protection authorities slapped the ride-hailing company...
A Single Request Shouldn’t Do This Much One request. That’s all it took this week to turn a WordPress site into a hacker’s playground. Or to...
HollowGraph: A New Espionage Implant Security researchers at Group-IB have uncovered a sophisticated espionage implant that turns a hijacked Microsoft 365 calendar into a covert command-and-control...