AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android
Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malware...
have
Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone...
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
Ravie LakshmananJul 01, 2026Password Security / Cloud Security Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack"...
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses...
iPhone 18 Leak: Apple’s Next Pro Design May Have Appeared Online
The next iPhone may have made an unscheduled appearance inside Apple’s manufacturing chain. Possible design details for Apple’s next Pro...
Japanese Telecom Giant Says Breach May Expose 14.2 Million Email Accounts
Japanese telecommunications operator KDDI Corporation has disclosed a data breach that may have exposed email addresses and passwords for up...
AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks
Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby...
AI-Driven Identity Attacks Are Surging, PwC Warns
Identity and social engineering scams have been a time-honored way to gain unauthorized access to systems. Cybercriminals typically use email...
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a...
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
Swati KhandelwalJun 26, 2026Secure Messaging / Social Engineering The FBI and CISA have updated their March warning about Russian intelligence phishing Signal...
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack
Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades...
Europol, Microsoft Hit Malware Network Behind 27M Stolen Logins, 140,000 Infected Computers
Europol, Microsoft, and international partners have disrupted a global malware network after investigators recovered 27 million stolen login credentials and...
How France’s education ministry built an open-source file-share platform for 400K users
Although the digital services team doesn’t have full visibility into how Nuage has been received, Piédallu said feedback is positive,...
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Ravie LakshmananJun 24, 2026Open Source / Supply Chain Security Cybersecurity researchers have flagged a new class of CI/CD workflow weakness...
