Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack
Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack Pierluigi Paganini May 26, 2026 Attackers have poisoned four...
found
Hacker Lists 340M OnlyFans User Records for Sale
OnlyFans users may be facing one of the largest identity-exposure scares yet tied to the platform. Hackread found a hacker...
Google Play Scam Apps Hit 7.3M Downloads with Fake Call Logs
ESET found 28 CallPhantom scam apps on Google Play that promised fake call logs and had reached more than 7.3...
Malicious PyTorch Lightning Packages Found on PyPI
The post Malicious PyTorch Lightning Packages Found on PyPI appeared first on 2024 Sonatype Blog. TL;DR Two malicious versions of...
Claude Mythos Has Found 271 Zero-Days in Firefox
Claude Mythos Has Found 271 Zero-Days in Firefox That’s a lot. No, it’s an extraordinary number: Since February, the Firefox...
AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud
Cybersecurity researchers have unmasked a novel ad fraud scheme that has been found to leverage search engine poisoning (SEO) techniques...
Your MTTD Looks Great. Your Post-Alert Gap Doesn’t
Anthropic restricted its Mythos Preview model last week after it autonomously found and exploited zero-day vulnerabilities in every major operating...
GUEST ESSAY: Executives trust AI security even as security teams confront blind spots, new risks
By Daniel Bardenstein In our recent report, Beyond the Black Box, we found a striking gap: 80% of executives...
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers
Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information...
It’s an AI boom, not a bubble…, but is that true at Microsoft?
Where is AI booming? That deep-dive report offers plenty of good news for AI boosters. It found that AI spending...
Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement
New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused...
Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police Custody
Ravie LakshmananFeb 18, 2026Mobile Security / Spyware New research from the Citizen Lab has found signs that Kenyan authorities used...
Keenadu backdoor found preinstalled on Android devices, powers Ad fraud campaign
Keenadu backdoor found preinstalled on Android devices, powers Ad fraud campaign Pierluigi Paganini February 18, 2026 Kaspersky uncovered Keenadu, an...
Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers
Ravie LakshmananFeb 16, 2026Vulnerability / Encryption A new study has found that multiple cloud-based password managers, including Bitwarden, Dashlane, and...
How to find and remove credential-stealing Chrome extensions
Researchers have found yet another family of malicious extensions in the Chrome Web Store. This time, 30 different Chrome...
