4+ day, 5+ hour ago   (637+ words) Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses recruiter personas on LinkedIn and other employment platforms to deliver projects that appear safe enough to…...

5+ day, 4+ hour ago   (737+ words) A covert cross-account communication channel inside ChatGPT let an attacker hijack a victim’s session and silently exfiltrate data from connected apps like Gmail, all while the victim saw nothing unusual in their conversation. These containers cannot reach the public internet…...

5+ day, 7+ hour ago   (780+ words) A proof-of-concept zero-click worm dubbed “WeWorm” that it says can spread through WeChat voice calls on both iOS and Android, compromising a target’s WeChat account in seconds without the victim answering the call. Calif says the bug was reported to…...

6+ day, 5+ hour ago   (506+ words) Your LG smart TV may be doing far more than displaying your favorite shows while it sits “off” in the corner of your living room. A new investigation from Gamers Nexus, conducted alongside Level1Techs and independent security researchers, alleges that certain…...

6+ day, 16+ hour ago   (1228+ words) Weekly Cybersecurity Newsletter Bulletin - CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and... CyberSecurityNews This edition of the weekly cybersecurity newsletter bulletin covers critical zero-day discoveries, nation-state router compromises, emerging autonomous AI attack vectors, and major cloud identity incidents. Below…...

1+ week, 2+ day ago   (564+ words) NodeStealer has returned with a more invasive toolkit. The Python-based information stealer can now record keystrokes, watch copied text, and capture victims’ screens, turning an account-stealing infection into continuous surveillance. The change raises the stakes for people whose browsers hold…...

1+ week, 4+ day ago   (319+ words) The issue was uncovered by security researcher Jose Rodriguez, known for a string of past lock screen bypass discoveries on both Android and iOS, and has already been reported to Meta and Google. As of now, no patch has been…...

1+ week, 6+ day ago   (701+ words) Nineteen browser extensions have been linked to a malware operation that steals cryptocurrency wallet secrets, passwords and other data. The extensions appeared to offer useful tools, including search helpers, price monitors and copy-unlocking features, before later updates quietly introduced the…...

1+ week, 6+ day ago   (460+ words) The update is designed to reduce household profiling, limit tracking, and defend users against threats ranging from malicious Wi‑Fi activity to cellular SMS scams. Android smartphones often connect to home Wi‑Fi networks shared by smart TVs, cameras, game…...

1+ week, 6+ day ago   (437+ words) The privacy-focused feature generates unique forwarding addresses that deliver messages to a user’s primary inbox while keeping that primary address hidden from online services. The release is the 39th entry in Brave’s ongoing privacy-update series. It was developed by Brave engineers…...