Smashing Security podcast #478: This job interview could destroy your company
You’ve been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment...
been
Smashing Security podcast #478: This job interview could destroy your company
You’ve been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment...
Smashing Security podcast #478: This job interview could destroy your company
You’ve been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment...
Smashing Security podcast #478: This job interview could destroy your company
You’ve been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment...
Smashing Security podcast #478: This job interview could destroy your company
You’ve been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment...
Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
Ravie LakshmananAug 03, 2026Mobile Security / Vulnerability An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS...
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Ravie LakshmananAug 03, 2026Vulnerability / AI Security Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that...
Read This Before You Buy That TV Streaming Stick
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited...
SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own...
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan...
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
Russian state-aligned hackers have been compromising governmental and commercial organizations throughout the West through zero-click phishing emails, federal agencies in...
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Ravie LakshmananJul 21, 2026Vulnerability / Network Security Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS...
Sophos ZTNA unlocks SaaS app control and so much more
For many of you, Sophos ZTNA has been a staple in your security stack for a few years now, providing...
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions...
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
Ravie LakshmananJul 19, 2026Malware / Cyber Warfare Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to...
