Google Blocked 1.75M Harmful Apps From Play Store in 2025
Generated with Google Gemini. Google relied on expanded AI-driven review systems and stronger front-end controls to block more than 1.75...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
NDSS 2025 – NodeMedic-FINE: Automatic Detection And Exploit Synthesis For Node.js Vulnerabilities
Session 13A: JavaScript Security Authors, Creators & Presenters: Darion Cassel (Carnegie Mellon University), Nuno Sabino (IST & CMU), Min-Chien...
North Korean IT worker scam nets Ukrainian five-year sentence in the U.S.
North Korean IT worker scam nets Ukrainian five-year sentence in the U.S. Pierluigi Paganini February 20, 2026 A Ukrainian man...
Randall Munroe’s XKCD ‘Double-Pronged Extension Cord’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
What Is Zero Trust Security? A Plain-English Guide
The old security model had a name, even if no one used it: "castle and moat." You built a...
Using threat modeling and prompt injection to audit Comet
Before launching their Comet browser, Perplexity hired us to test the security of their AI-powered browsing features. Using adversarial...
Agentic AI – Ongoing coverage of its impact on the enterprise
CrowdStrike bets big on agentic AI with new offerings after $290M Onum buy September 16, 2025: At its Fal.Con conference,...
AI agents still need humans to teach them
The best performances came from agents with curated skills, which scored an average of 16.2 percentage points higher than agents...
BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration
Ravie LakshmananFeb 20, 2026Vulnerability / Cyber Attack Threat actors have been observed exploiting a recently disclosed critical security flaw impacting...
Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily...
ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware
Ravie LakshmananFeb 20, 2026Malware / Threat Intelligence Cybersecurity researchers have disclosed details of a new ClickFix campaign that abuses compromised...
The 20 Coolest Web, Email and Application Security Companies Of 2026: The Security 100
From AI-powered vendors protecting email inboxes and web browsers, to providers of modern code security, here’s a look at 20...
Microsoft: Critical Security Issue Found in Windows Notepad
Image: Microsoft. Notepad has long been Windows’ quiet utility knife. It opens instantly, asks for nothing, and simply displays text....
Scammers Use Fake Gemini AI Chatbot for Crypto Scam
Image: vanenunes (Envato) If a chatbot claiming to be Gemini AI begins to promote a new Google cryptocurrency, it’s best...
Dynamic Objects in Active Directory: The Stealthy Threat
Active Directory’s “dynamic objects” feature offers attackers a perfect evasion cloak. These objects automatically self-destruct without a trace, so...