Microsoft has purged 119 malicious browser extensions from the Edge Add-ons store following the discovery of a sophisticated malware campaign dubbed “StegoAd.” The extensions used steganography to conceal malicious code within seemingly innocent image files and custom fonts, enabling attackers to in
Bluekit, a sophisticated Phishing-as-a-Service (PHaaS) platform, leverages browser-in-the-middle (BitM) attacks to intercept authentication sessions and bypass multi-factor authentication (MFA) protections. Operating as a commercial service, Bluekit provides cybercriminals with turnkey phishing infr
A critical vulnerability (CVE-2026-55200) in libssh2, a widely-used SSH client library, has been publicly disclosed with a working proof-of-concept exploit available. The flaw allows malicious SSH servers to execute arbitrary code on connecting clients through memory corruption during the SSH handsh
Threat actors have compromised legitimate npm and Go packages to deliver a sophisticated Python-based infostealer that exploits Visual Studio Code’s task automation system. The malware hijacks VS Code’s tasks.json configuration to execute malicious payloads silently when developers open infected pro
Chinese AI company Zhipu AI has released GLM-5.2, claiming performance comparable to Anthropic’s Claude in identifying security vulnerabilities. This development signals a significant shift in the AI-powered security landscape, as state-backed Chinese models potentially match Western capabilities in
Japanese telecommunications giant KDDI Corporation disclosed a massive data breach affecting up to 14.2 million email login credentials across six internet service providers. The incident, which originated from unauthorized access to KDDI’s email infrastructure, exposed usernames and passwords store
Ukraine’s Security Service (SBU) has exposed a sophisticated SMS phishing campaign orchestrated by Russian intelligence services targeting government officials and critical infrastructure personnel. The operation uses deceptive text messages impersonating legitimate support services to harvest crede
A critical vulnerability in the Linux kernel, tracked as CVE-2024-43503 and dubbed “DirtyClone,” allows local attackers to escalate privileges to root level. This marks the fourth significant kernel flaw discovered in just six weeks, affecting multiple Linux distributions. The vulnerability resides
A sophisticated cloud attack technique called “bucket hijacking” enables threat actors to redirect legitimate cloud storage data streams to attacker-controlled external buckets. By exploiting misconfigured bucket permissions, dangling DNS references, and predictable naming conventions, adversaries c
Russian state-sponsored hackers are actively targeting Signal messenger users to steal backup recovery keys, according to a recent FBI alert. These attackers are shifting tactics to compromise encrypted communications by exploiting the backup and recovery features rather than attempting to break Sig
