Cybercriminals are distributing malware through a fraudulent ChatGPT download website, targeting both Windows and Mac users. The malicious site mimics OpenAI’s interface and tricks victims into downloading trojanized installers that deploy info-stealers and remote access tools. This campaign exploit
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in the LiteSpeed Cache plugin for WordPress to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2024-28000, this privilege escalation flaw affects millions of WordPress sites and is b
A serial sextortionist received a 33-year federal prison sentence after orchestrating a widespread campaign targeting 145 children across multiple platforms. The predator used social engineering tactics, fake personas, and manipulation to coerce minors into producing explicit content, then threatene
A critical privilege escalation vulnerability in Veeam Backup & Replication allows authenticated attackers to gain SYSTEM-level privileges on affected servers. The flaw, tracked as CVE-2025-23120, impacts multiple versions of the widely-deployed enterprise backup solution and could enable attackers
JINX-0164, a sophisticated threat actor, is actively targeting cryptocurrency companies with fake job recruitment campaigns that deliver macOS malware. The operation leverages social engineering through fraudulent recruiter personas to compromise employees at digital asset firms, deploying multi-sta
Security researchers discovered a critical zero-click vulnerability in Google Pixel 10’s Video Processing Unit (VPU) driver that allowed attackers to access entire kernel memory without user interaction. The exploit chain bypassed multiple security layers, enabling complete device compromise through
Elon Musk revealed that US military suicide drones have been operating on Starlink satellite internet connections, directly violating SpaceX’s terms of service and usage policies. The unauthorized use of commercial satellite infrastructure for offensive military operations raises critical questions
A massive underground ransomware economy is actively targeting exposed databases worldwide, with over 30,000 instances compromised and held for ransom. Attackers systematically scan for misconfigured databases, exfiltrate sensitive data, delete the original contents, and demand payment for restorati
Iranian state-sponsored threat actor MuddyWater has launched a sophisticated espionage campaign targeting government and telecom sectors across nine countries using DLL side-loading techniques. The operation leverages legitimate applications to execute malicious payloads while evading detection, dem
Researchers have demonstrated that standard Wi-Fi routers can be weaponized to identify and track individuals through walls with alarming accuracy. By analyzing how wireless signals interact with the human body, attackers can create detailed profiles of people’s unique physical characteristics witho