NFCShare, a sophisticated Android banking trojan, is actively spreading through fraudulent banking app updates hosted on GitHub repositories. The malware specifically targets Near Field Communication (NFC) functionality to steal payment card data and intercept banking credentials. Attackers are leve
Apple’s upcoming macOS 27 will exclusively support Apple Silicon processors, officially ending support for Intel-based Macs. This architectural shift eliminates an entire class of x86-64 vulnerabilities, significantly reduces the operating system’s attack surface, and forces security teams to reasse
A critical vulnerability in the Linux kernel, stemming from a single character typo in the netfilter subsystem, allows unprivileged local users to escalate privileges to root access. The flaw affects multiple kernel versions and has working proof-of-concept exploits publicly available. Immediate pat
The Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to patch by specified deadlines. The additions include critical flaws current
Apple’s upcoming iOS 27 introduces an automatic password change feature that detects compromised credentials and replaces them without user intervention. This system leverages Apple’s Password Manager integration with known breach databases to identify at-risk accounts and securely generate new pass
Cybercriminals are exploiting Google’s advertising platform to distribute a sophisticated macOS backdoor dubbed “FlutterBridge.” The campaign uses malicious ads that appear at the top of Google search results, mimicking legitimate software downloads. When users click these ads, they’re redirected to
A newly identified China-linked threat cluster designated OP-512 has been observed deploying a sophisticated web shell framework specifically targeting Internet Information Services (IIS) servers. The malware employs cryptographic uniqueness per deployment, advanced obfuscation techniques, and modul
A critical zero-day vulnerability (CVE-2024-50751) in Check Point VPN gateways is being actively exploited in the wild, allowing unauthenticated remote attackers to execute arbitrary code. The flaw affects multiple Check Point products including CloudGuard Network, Quantum Maestro, Quantum Scalable
A critical cryptographic vulnerability in Zcash’s shielded transaction system could have allowed attackers to create unlimited counterfeit coins without detection. Discovered and secretly patched in 2018, the flaw affected the zero-knowledge proof system that underpins Zcash’s privacy features. The
Threat actors are cloning legitimate websites of popular reverse engineering and security analysis tools—including Ghidra, dnSpy, and others—to distribute malware-laden versions. These fraudulent sites appear in search results and trick researchers, developers, and security professionals into downlo