access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Leitlinie für Post-Quanten-Kryptografie – BSI setzt Zeitmarken für den Umstieg auf quantensichere Verfahren
Tags: bsiFirst seen on security-insider.de Jump to article: www.security-insider.de/bsi-leitlinie-post-quanten-kryptografie-zeitplan-2026-2030-2035-a-66a3260821f1a2ac17d6248de45dbcfe/ also interesting: Elektroschrott: BSI macht ab Werk installierte Android-Malware unschädlich BSI-Analyse von Nextcloud: Zwei-Faktor-Authentifizierung war angreifbar BSI ANSI: Empfehlungen zur sicheren Integration von LLM BSI-Warnung vor Watchguard-Firebox Firewall-Angriffen
-
Leitlinie für Post-Quanten-Kryptografie – BSI setzt Zeitmarken für den Umstieg auf quantensichere Verfahren
Tags: bsiFirst seen on security-insider.de Jump to article: www.security-insider.de/bsi-leitlinie-post-quanten-kryptografie-zeitplan-2026-2030-2035-a-66a3260821f1a2ac17d6248de45dbcfe/ also interesting: Elektroschrott: BSI macht ab Werk installierte Android-Malware unschädlich BSI-Analyse von Nextcloud: Zwei-Faktor-Authentifizierung war angreifbar BSI ANSI: Empfehlungen zur sicheren Integration von LLM BSI-Warnung vor Watchguard-Firebox Firewall-Angriffen
-
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/india-warns-ai-cyberattacks/ also interesting: Top 10 Cybersecurity Predictions for 2026 Top 12 ways hackers broke into your systems in 2024 China-linked hackers target Japan’s national…
-
Amatera: Wie der weit verbreitete Infostealer funktioniert und sich verbreitet
Tags: cybercrimeDie Cyberkriminalität hat sich hochgradig professionalisiert. Ein Beispiel dafür ist eine Schadsoftware, die in der ersten Jahreshälfte 2026 in Südamerika die Runde machte First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/uber-eset-research/amatera-wie-der-weit-verbreitete-infostealer-funktioniert-und-sich-verbreitet/ also interesting: Cybercriminals Use Zoho WorkDrive Folders to Spread Obfuscated PureRAT Malware Cryptomixer founders pled guilty to laundering money for cybercriminals Jaguar Land Rover:…
-
Vercel ties login sessions to devices, rolls out AI security reviews in public beta
Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound Session Credentials (DBSC) and the launch … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/vercel-security-review-session-hijacking/ also interesting: Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying…
-
OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI
Melbourne, Florida, 5th November 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/openmatter-network-positions-decentralized-computing-as-an-alternative-to-data-centers-for-ai/ also interesting: 5 Encrypted Attack Predictions for 2025 Cybersecurity Needs Satellite Navigation, Not Paper Maps What is Security Posture Management and Why is it Important? What is Security Posture Management and Why is it Important?
-
Kein Patch verfügbar: Gefährliche Android-Lücke kann Smartphones unbrauchbar machen
Forscher haben eine gefährliche Android-Lücke aufgedeckt, mit der sich das System dauerhaft in eine Bootschleife versetzen lässt. Es droht Datenverlust. First seen on golem.de Jump to article: www.golem.de/news/kein-start-noetig-blosse-app-installation-kann-android-geraete-unbrauchbar-machen-2611-214896.html also interesting: Android Update Patches Critical Vulnerability Android Jelly Bean update 4.1.1 patches DNS poisoning vulnerability Google Announces Vanir, A Open-Source Security Patch Validation Tool Android-Updates im…
-
Okta-Studie zeigt: Deutsche Verbraucher misstrauen autonomen KI-Agenten
Okta Customer Identity Report 2026: Nur 36 % der Deutschen wollen Entscheidungen an KI-Agenten delegieren. Datenschutz und Kontrolle bleiben entscheidend. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/okta-studie-zeigt-deutsche-verbraucher-misstrauen-autonomen-ki-agenten/a47017/ also interesting: AI adoption fuels problems for identity management Okta introduces Identity Security Fabric to secure AI agents Post-Mythos Security Rally Rewards Broad Cyber Platforms AI underscores…
-
Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has reached the queue. Progress then depends on information the finding may lack: who owns the system, whether attackers can reach it, what protection exists, and how a change could affect…
-
Cyberattack on Norway’s aid agency may have swept up all user data
The names and email addresses of 20,614 people registered on Norad’s Grants Portal may have ended up in the hands of attackers, Norway’s development aid agency has disclosed. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/norad-grants-portal-breach/ also interesting: 5 Encrypted Attack Predictions for 2025 Cybersecurity Weekly Update 24 February 2025 Cybercriminals switch up their…
-
UNM Health Shuts Clinics and Diverts Patients During Security Incident
A cybersecurity incident forced UNM Health to divert ambulances, cancel appointments, and pause care while it contained the threat. On Monday, October 26, the University of New Mexico Health System (UNM Health) faced the kind of security incident that healthcare leaders dread: one serious enough to change how patients could receive emergency care. A major…
-
Prompt-Adware umgeht Schutzmechanismen und verändert Anweisungen an KI-Agenten
Sicherheitsforscher von Check Point Research (CPR), der Forschungsabteilung von Check Point Software Technologies, haben eine neuartige Bedrohungsform namens ‘Prompt Adware” aufgedeckt. Im Mittelpunkt der Untersuchung steht das OpenAI-Codex-Jailbreak-Bundle ‘Haiou”, das ursprünglich zur Deaktivierung von Sicherheitsbeschränkungen beim KI-Modell OpenAI-Codex entwickelt wurde. Die Sicherheitsforscher stellten fest, dass Haiou nicht nur Schutzmechanismen umgeht, sondern auch die Anweisungen des KI-Agenten…
-
ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration
esearch by: Alexey Bukhteyev Key Takeaways Introduction Earlier this year, Check Point Research disclosed a security flaw in ChatGPT’s code-execution runtime that allowed sensitive conversation data to be silently exfiltrated to an attacker-controlled server through DNS tunneling, a hidden outbound channel that bypassed the runtime’s network isolation. A fix for this issue was promptly deployed.…
-
Kein Start nötig: Bloße App-Installation kann Android-Geräte unbrauchbar machen
Tags: androidForscher decken eine gefährliche Android-Lücke auf. Die Installation einer App kann das System in eine Bootschleife versetzen. Es droht Datenverlust. First seen on golem.de Jump to article: www.golem.de/news/kein-start-noetig-blosse-app-installation-kann-android-geraete-unbrauchbar-machen-2611-214896.html also interesting: DEF CON 32 The Way To Android Root: Exploiting Smartphone GPU Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play…
-
AI Agent Governance: Who Owns Access and Accountability?
AI agent governance requires clear ownership. Learn how IT leaders can manage sensitive data access, preserve audit trails, and test shutdown controls. The post AI Agent Governance: Who Owns Access and Accountability? appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-agent-governance-access-accountability/ also interesting: Cross-post: Office of the CISO 2024 Year in Review:…
-
E-Mail bleibt die Achillesferse moderner Cloud-Strategien
Unternehmen investieren in Cloud-Plattformen, moderne Identitätsverwaltung und automatisierte Sicherheitsprozesse. Sie schützen ihre Anwendungen, kontrollieren Zugriffsrechte und verlagern geschäftskritische Daten in hochverfügbare Infrastrukturen. Doch ausgerechnet einer der wichtigsten Kommunikationskanäle bleibt häufig unzureichend abgesichert: die E-Mail. Phishing, versehentlich versendete Informationen und unverschlüsselte Nachrichten gefährden vertrauliche Daten ebenso wie die Integrität geschäftlicher Abläufe. Wer seine Cloud-Strategie konsequent absichern…
-
Wenn die IoT-Sicherheit vernachlässigt wird, verwandelt sich der Gefrierschrank in einen Backofen
Unter Cybersicherheit wurde bisher vor allem der Schutz von Kunden- oder Finanzdaten sowie geistigem Eigentum verstanden. Derzeit wird sichtbar, welchen Schaden Cyberangriffe anrichten können, bei denen nichts gestohlen oder verschlüsselt, sondern die Temperatur eines Kühlgeräts manipuliert wird. Jüngste Angriffe auf Kühlsysteme für Lebensmittel in Supermärkten in ganz Europa zeigen, dass Cyberbedrohungen aus der digitalen Welt…
-
Crashgefahr für Android-Smartphones
Die Experten der Bitdefender Labs haben auf einem Google-Pixel-10-Smartphone mit Android 17 eine speziell entwickelte App entdeckt, die einen Kreislauf eines Systemzusammenbruchs auslöst. Dieser lässt sich nur durchbrechen, wenn der Nutzer das Gerät auf den Werkstatus zurücksetzt (Factory-Reset), womit alle gespeicherten Daten verloren sind. Einen Fix des Problems gibt es aktuell noch nicht. Die in…
-
Gefährliche Backup-Lücke: Warum gesicherte Kubernetes-Daten im Ernstfall nicht ausreichen
Kubernetes-Backup: Warum VM-Backups und PV-Snapshots nicht ausreichen. HYCU erklärt fünf Herausforderungen und typische Fehler bei der Datensicherung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/gefaehrliche-backup-luecke-warum-gesicherte-kubernetes-daten-im-ernstfall-nicht-ausreichen/a47010/ also interesting: Veeam optimiert Ransomware-Schutz und Sicherheit für Kubernetes Cybersecurity Snapshot: CISA Analyzes Malware Used in SharePoint Attacks, as U.K. Boosts Cyber Assessment Framework What to look for in a…
-
Chinese Nation-State Threat Activity Falls Sharply in Q2 and Q3 2026
Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-nation-activity-falls/ also interesting: New Cross-Platform Malware ‘Noodle RAT’ Targets Windows and Linux Systems BadIIS Malware Spreads via SEO Poisoning, Redirects Traffic, Plants Web Shells Cloudflare Forces Widespread Outage to…
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…
-
Hackers Develop New HYFLOCK Ransomware That Encrypts Files and Attempts to Block Recovery
HYFLOCK ransomware operators have developed successive Windows encryptors that lock files, access network shares, and attempt to obstruct recovery, while implementation flaws create sharply different outcomes for victims. The investigation distinguishes demonstrated functionality from promotional claims. Although researchers confirmed encryption and scheduled-task registration, they did not establish successful domain-wide propagation or reliable execution after remote…
-
Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content Starting With iOS 27.3
Apple will start checking iCloud photos and files shared through >>Anyone with the Link<< for harmful content beginning with iOS 17.3. This policy also applies to iPadOS, macOS, and visionOS version 17.3 or later. It distinguishes between publicly accessible sharing links and content that is restricted to specifically invited recipients. The change appears in an…
-
Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content Starting With iOS 27.3
Apple will start checking iCloud photos and files shared through >>Anyone with the Link<< for harmful content beginning with iOS 17.3. This policy also applies to iPadOS, macOS, and visionOS version 17.3 or later. It distinguishes between publicly accessible sharing links and content that is restricted to specifically invited recipients. The change appears in an…
-
China-Aligned Hackers Hijack Popular Sogou Keyboard Software to Secretly Install DarkVigil Malware
A China-aligned espionage group abused the update traffic of Sogou Input Method, one of China’s most widely used keyboard apps, to quietly install the DarkVigil implant on victims’ machines. ESET Research, which tracks the actor as SlippyNunchucks, published its findings on November 4, 2026. Tencent, which owns Sogou, has patched the flaw in version 16.10.…
-
China-Aligned Hackers Hijack Popular Sogou Keyboard Software to Secretly Install DarkVigil Malware
A China-aligned espionage group abused the update traffic of Sogou Input Method, one of China’s most widely used keyboard apps, to quietly install the DarkVigil implant on victims’ machines. ESET Research, which tracks the actor as SlippyNunchucks, published its findings on November 4, 2026. Tencent, which owns Sogou, has patched the flaw in version 16.10.…
-
Keeper Security Launches Self-Managed PAM Solution for Air-Gapped and Critical Infrastructure Environments
Keeper Security has announced the launch of Self-Managed Keeper, a new self-hosted deployment option designed to bring privileged access management (PAM) capabilities to highly restricted and disconnected environments. The solution enables government agencies, critical infrastructure operators and highly regulated enterprises to manage credentials, secrets and privileged sessions entirely within their own infrastructure, without depending on…
-
Scammers capitalize on GTA 6 hype to push malware and crypto cons
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned in a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/gta-6-scams-fake-leaks-early-access/ also interesting: 7 biggest cybersecurity stories of 2024 AI gives superpowers to BEC attackers That CISO job…
-
Patched Zyxel GS1900 switches remained open to inwild exploit (CVE-2026-107441)
Zyxel GS1900 series network switches that received a fix for a flaw that was later reported to have been exploited in the wild are still open to an exploit attackers used, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/zyxel-cve-2026-107441-exploit/ also interesting: Helldown ransomware exploits Zyxel VPN flaw to breach networks Helldown Ransomware Group Tied…
-
Fake ChatGPT and Claude Apps Use Signed Executables to Install Yoba Malware
Fake ChatGPT and Claude apps spread Yoba malware through GitHub, using signed executables to load a cryptominer on… First seen on hackread.com Jump to article: hackread.com/fake-chatgpt-claude-apps-software-yoba-malware/ also interesting: Rising ClickFix malware distribution trick puts PowerShell IT policies on notice Browser Wars, Continued: Why Everyone Is Building Their Own AI Browser Yoba malware hides in fake…
-
Beyond Cold Storage: Why Hardware Wallets Need Open Source and Clear Signing
Hardware wallets protect private keys, but clear signing, open-source firmware and on-device verification let users see malicious crypto transactions. First seen on hackread.com Jump to article: hackread.com/hardware-wallets-need-open-source-clear-signing/ also interesting: 2025 Cybersecurity and AI Predictions Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework Cybersecurity Snapshot: Global Agencies Target Criminal…
-
Mit KI-Agenten: OpenAI will in Linux-System fast 1.000 Root-Lücken gefunden haben
Laut OpenAI haben KI-Agenten bei internen Tests 948 Root-Lücken in einem Linux-System aufgedeckt – und obendrein passende Patches entwickelt. First seen on golem.de Jump to article: www.golem.de/news/mit-ki-agenten-openai-will-in-linux-system-fast-1-000-root-luecken-gefunden-haben-2611-214884.html also interesting: AI Finds What Humans Missed: OpenAI’s o3 Spots Linux Zero-Day First AI-Powered Ransomware PromptLock Targets Windows, Linux and macOS Claude Mythos ist der Hype gerechtfertigt? OpenAI’s…
-
Standard auf Entra-Rechnern, Opt-out per Gruppenrichtlinie – Windows 11 aktiviert die Einstellungssicherung selbst
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/windows-11-aktiviert-die-einstellungssicherung-selbst-a-15208b998953a6a696744c2710646a46/ also interesting: Microsoft kündigt Patches für kritische IE- und Windows-Lücken an Facebook ads for Windows desktop themes push info-stealing malware Neue VanHelsing-Ransomware breitet sich rasant aus WinRAR MotW bypass flaw fixed, update ASAP (CVE-2025-31334)
-
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ghostmap-bug-android-phones-stuck/ also interesting: Amnesty Finds Cellebrite’s Zero-Day Used to Unlock Serbian Activist’s Android Phone Serbian student’s Android phone compromised by exploit from Cellebrite LANDFALL Spyware Targeted Samsung Galaxy Phones via Malicious Images Google expands…
-
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
Tags: authentication, breach, business, cyber, data, exploit, finance, risk, security-incident, threatOctober 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, and everyday business workflows. For enterprises, these campaigns raise the stakes beyond individual security incidents, increasing the risk of financial losses, data breaches, and costly operational disruption.Below, we examine five First seen on thehackernews.com Jump to…
-
Why waiting for quantum computers to arrive could leave your security exposed
By Tim Hudson, President, OpenSSL Corporation For organisations preparing for post-quantum cryptography, one of the biggest risks is assuming they can wait until a sufficiently powerful quantum computer arrives before taking action. Whilst it’s understandable to focus on the point when quantum computers might be able to break today’s cryptography, nobody can predict exactly when…
-
Google puts new limits on AI agents that hunt threats and fix vulnerabilities
Google Cloud is adding new controls to CodeMender, its AI tool for finding and fixing software vulnerabilities, allowing businesses to isolate attack simulations and target … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/google-cloud-ai-agents-security-controls/ also interesting: Applying Tenable’s Risk-based Vulnerability Management to the Australian Cyber Security Centre’s Essential Eight What to look for in a…
-
Ukraine fires two senior security officials amid corruption probe into scam call centers
Ukraine’s security service has fired two senior officials amid a corruption investigation into an alleged criminal network that bribed law enforcement officers to protect fraudulent call centers and other illegal operations. First seen on therecord.media Jump to article: therecord.media/ukraine-fires-senior-security-officials-amid-scam-center-corruption-investigation also interesting: Top 10 Cybersecurity Predictions for 2026 9 things CISOs need know about the dark…
-
(g+) KI in der Softwareentwicklung: Warum Prompts Coding-Agenten nicht absichern
KI-Agenten können Code ändern und Systeme aufrufen. Warum Verbote im Prompt nicht reichen und welche technischen Grenzen ihren Zugriff absichern. First seen on golem.de Jump to article: www.golem.de/news/ki-in-der-softwareentwicklung-warum-prompts-coding-agenten-nicht-absichern-2611-214799.html also interesting: Privacy Roundup: Week 3 of Year 2025 7 top cybersecurity projects for 2025 What is SIEM? Improving security posture through event log data Cybersecurity Snapshot:…
-
Mitarbeitende nutzen KI an der IT vorbei – Shadow-AI bringt Software unter Zugzwang
First seen on security-insider.de Jump to article: www.security-insider.de/shadow-ai-schutzfunktionen-software-a-05934e6b3eb963acef9013721b71de31/ also interesting: AI supply chain threats loom, as security practices lag Google Launches Gemini 3.5 Flash Cyber to Find, Validate, and Patch Critical Vulnerabilities LibreOffice says ‘no AI’ is now a software feature Anthropic AI Model Attempts to Inject Malicious Code Into Software
-
NATS Air Traffic Control Failure Cost UK Economy £33m
Cyber Monitoring Centre report claims an IT failure at the UK’s NATS air traffic services provider cost over £30m First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nats-air-traffic-control-fail-cost/ also interesting: Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive, While Threat from North Korean IT Workers Gets the Spotlight Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive,…
-
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country.Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools First seen…
-
Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content
Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3.The change specifically applies to scenarios where users share iCloud content, such as photos in iCloud Photos or files in iCloud Drive, by sharing a link and making it accessible…
-
Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies
Marsalek, a free malware-as-a-service (MaaS) platform that disguised infostealers as game cheats and utilities for Roblox, Fortnite, Counter-Strike 2, Minecraft, and Grim Dawn. It was active from mid-December 2025 to late May 2026. Researchers counted more than 1,560 registered accounts, over 400 malicious files and more than 29 distribution URLs. Its dashboard let users build…
-
Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies
Marsalek, a free malware-as-a-service (MaaS) platform that disguised infostealers as game cheats and utilities for Roblox, Fortnite, Counter-Strike 2, Minecraft, and Grim Dawn. It was active from mid-December 2025 to late May 2026. Researchers counted more than 1,560 registered accounts, over 400 malicious files and more than 29 distribution URLs. Its dashboard let users build…
-
GhostMap Android flaw lets malicious app trigger persistent boot loop
Attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-persistent-boot-loop/ also interesting: Privacy Roundup: Week 11 of Year 2025 Microsoft’s November 2025 Patch Tuesday Addresses 63 CVEs (CVE-2025-62215) UXSS Vulnerability in DuckDuckGo…