Google Begins Restoring Blogger Sites After False Malware Alerts
Google’s effort to keep malware off Blogger briefly ended up locking out legitimate publishers instead. Beginning Tuesday, August 4, hundreds...
legitimate
WhatsApp Users Say They’re Being Locked Out of Accounts by Mistake
WhatsApp’s effort to stop bad actors briefly swept up legitimate users, triggering unexplained account suspensions that the company now admits...
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting...
FBI Warns: ‘Kali365’ Phishing Service Targets Microsoft 365 Accounts
A new phishing service is turning a legitimate Microsoft login process into a shortcut for account takeovers. The FBI warned...
One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign
StellarMonSetup.exe is in fact GoToResolve, a legitimate unattended remote-administration tool. Once installed, it gives the actor a persistent remote desktop...
New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay,...
New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay,...
Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks
Attackers are abusing normal OAuth error redirects to send users from a legitimate Microsoft or Google login URL to...
CISOs in a Pinch: A Security Analysis of OpenClaw
Anthropic's Claude Code Security is a legitimate leap forward for pre-deployment vulnerability detection - and the market sell-off (Cybersecurity ETF...
Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware
A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into...
Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware
Cybersecurity researchers have discovered a new supply chain attack in which legitimate packages on npm and the Python Package Index...
