Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Malware Can Steal Your Google Synced Passkey Without Asking for Your Password or Fingerprint
3+ hour, 13+ min ago (429+ words) New research reveals that malware already sitting on a compromised Windows PC can hijack Google’s synced passkeys and take over accounts without ever prompting the victim for a password, PIN, or fingerprint. The findings, detailed in the third part of…...
TP-Link TL-WR940N Vulnerability Enables Remote Code Execution Attacks
6+ hour, 15+ min ago (391+ words) The issue lies within the router’s RTSP connection tracking (conntrack) feature. RTSP, or Real-Time Streaming Protocol, is commonly used to control multimedia streaming sessions. The vulnerable module processes RTSP-related network traffic within the router’s kernel, which is the core part…...
Hugging Face Diffusers Vulnerabilities Enable Remote Code Execution Through Malicious AI Models
5+ hour, 58+ min ago (494+ words) A set of high-severity vulnerabilities in Hugging Face’s diffusers library that allow a malicious model repository to silently execute arbitrary code on any machine that loads it. The flaws bypass trust_remote_code, the very safeguard designed to stop unreviewed code from running…...
Android RAT Survives Reboots Using Watchdog Services and Boot Receivers
7+ hour, 18+ min ago (609+ words) Android users are facing a new remote-access threat that hides behind a fake emergency alert application. The malware, called Octagon, poses as Bahrain’s BH Alert service and leads victims through a convincing setup process designed to win dangerous permissions. The…...
ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims
9+ hour, 54+ min ago (521+ words) ModernStealer is the name behind underground posts claiming to offer military, government, nuclear, and aerospace material. The posts appeared on dark web forums and Telegram, making a single alias a concern for public-sector and defence teams. The activity is not…...
MacSync macOS Stealer Uses Fake Claude Guide to Steal Passwords and Crypto Wallets
13+ hour, 52+ min ago (608+ words) Mac users searching for Claude installation help have been led into a dangerous trap. A malicious campaign used a paid search result and a fake guide on a legitimate Claude sharing page to persuade victims to paste a command into…...
XCSSET v40 Abuses Chrome DevTools Protocol to Steal Cookies and Run Commands
12+ hour, 40+ min ago (611+ words) XCSSET has returned with a way to target macOS developers. The latest version, v40, hides inside poisoned Xcode projects and can turn a local build into a supply-chain compromise. Once activated, it can spread through other projects, raising risk for developers…...
Internet-Facing SonicWall SMA Appliances Face Zero-Click Root Compromise
12+ hour, 14+ min ago (672+ words) Internet-facing SonicWall Secure Mobile Access, or SMA, appliances face a serious threat after attackers turned two flaws into a route to full VPN-gateway control. The campaign gives an outsider a way to move from a simple web request to root-level…...
Your Incident Response Plan Has a Dependency You Never Approved
3+ day, 3+ hour ago (1096+ words) During the first publicly documented agent-driven intrusion, the defenders tried to analyze the attack with commercial AI models and were refused. The attacker was operating under no usage policy at all. The most quietly alarming sentence in the Hugging Face…...
CyberStrike - AI-Powered Security Platform for Automated Penetration Testing
3+ day, 4+ hour ago (546+ words) A new open-source project called CyberStrike is positioning itself as the first AI agent built specifically for offensive security, turning any existing Claude, GPT, or LLM subscription into an autonomous red-team operator. Rather than functioning as a simple chatbot wrapper,…...