3+ week, 3+ day ago  (424+ words) A serious Windows vulnerability is reportedly being sold on the dark web for $220,000, highlighting the growing market for cyberattack tools and exploits. The exploit targets Windows Remote Desktop Services (RDS) and could allow attackers to gain system-level privileges on compromised…...

1+ mon, 1+ week ago  (416+ words) Microsoft has confirmed it is investigating a frustrating bug in the classic version of Microsoft Outlook for Windows, where the mouse pointer disappears while users move it across the app interface. The issue, first reported by users nearly two months…...

1+ mon, 1+ week ago  (523+ words) PayPal is notifying a small group of customers that a software glitch in one of its business loan platforms exposed sensitive customer information for nearly six months in 2025. The issue affected the company's PayPal Working Capital (PPWC) loan application, a…...

1+ mon, 1+ week ago  (419+ words) Microsoft has acknowledged that a software bug allowed its AI assistant, Microsoft 365 Copilot Chat, to summarize confidential emails " even when Data Loss Prevention (DLP) policies were put in place to block such access. The issue, tracked internally as CW1226324, was first…...

1+ mon, 2+ week ago  (561+ words) Despite ongoing efforts by Google to tighten security, malicious browser extensions continue to find their way onto the Chrome Web Store " and into users" browsers " putting their data and devices at risk. These add-ons can hijack browsing data, steal credentials,…...

1+ mon, 1+ week ago  (483+ words) Microsoft has confirmed that a faulty anti-phishing detection rule designed to stop credential theft campaigns mistakenly blocked thousands of legitimate emails and Teams messages for nearly a week. The disruption affected customers using Exchange Online and Microsoft Teams, two key…...

1+ mon, 1+ week ago  (513+ words) A suspected Chinese state-backed hacking group has been quietly exploiting a critical software flaw in Dell Technologies software since mid-2024, according to new research from cybersecurity firms Mandiant and the Google Threat Intelligence Group (GTIG). The threat cluster known as UNC6201 has…...

2+ mon, 16+ hour ago  (453+ words) Cybersecurity researchers from Socket's Threat Research team'have identified a developer-compromise supply chain attack targeting macOS users, where malicious versions of popular developer extensions were used to distribute the GlassWorm malware via the Open VSX Registry. The attack relied on hijacking…...

2+ mon, 3+ day ago  (562+ words) Cybersecurity researchers have recorded the largest distributed denial-of-service (DDoS) attack ever disclosed, after the Aisuru/Kimwolf botnet launched an unprecedented assault that peaked at 31.4 terabits per second (Tbps) and 200 million requests per second in a coordinated campaign late last year....

2+ mon, 1+ week ago  (635+ words) Password manager 1Password has introduced a new built-in phishing protection feature designed to stop users from accidentally sharing their usernames and passwords with scammers. The feature adds an extra layer of protection by warning users when they attempt to paste their…...