ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
Ravie LakshmananAug 07, 2026Malware / Social Engineering ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing...
being
American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials
American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials He’s being prosecuted for giving border...
More Than 45,000 Software Flaws Reported as AI Reshapes Cybersecurity
The number of software vulnerabilities being uncovered in 2026 is on pace to roughly double the total recorded in 2025,...
OpenAI to release delayed models Thursday amidst a sea of regulatory confusion
“What’s still not clear is the actual criteria being used to deem the models safe for release. The government has...
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a new case study...
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
Ravie LakshmananJun 23, 2026Malware / Social Engineering Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic...
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
Ravie LakshmananJun 23, 2026Malware / Social Engineering Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic...
Oracle Warns PeopleSoft Customers After Critical Zero-Day Exploited
A critical Oracle PeopleSoft flaw is already being exploited, putting more than 100 organizations on alert. Oracle issued an emergency...
Smashing Security podcast #466: Meta sees everything, Copy Fail, and a deepfake gets hired
Meta's smart glasses promise privacy "designed for you" - but everything they record was being beamed off to workers in...
Inside the lethal trifecta: Blast radius reduction in AI agent deployments
AI agents that can read files, call APIs, and perform actions are already being deployed in enterprises. These agents often...
CISA Warning: High-Severity Linux Flaw Puts Unpatched Systems at Risk
CISA warns that the nine-year-old Linux Copy Fail flaw is being actively exploited, allowing local attackers to gain root access...
Microsoft Confirms Windows Flaw Is Being Exploited After Incomplete Patch
Microsoft confirmed a Windows zero-click flaw tied to an incomplete patch is being exploited, putting credentials at risk for unpatched...
Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks
Ravie LakshmananApr 28, 2026Cyber Espionage / Vulnerability A Chinese national accused of being a member of the Silk Typhoon hacking...
Chinese Silk Typhoon Hacker Extradited to U.S. Over COVID Research Cyberattacks
Ravie LakshmananApr 28, 2026Cyber Espionage / Vulnerability A Chinese national accused of being a member of the Silk Typhoon hacking...
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
In some compromised repositories, we observed both techniques being present simultaneously (i.e., the malicious .vscode/tasks.json alongside the appended obfuscated JavaScript)....
