A critical zero-day vulnerability in Visual Studio Code allows attackers to steal GitHub authentication tokens through a single click on a malicious link. The exploit leverages VS Code’s URI handler mechanism to execute unauthorized actions without user consent, potentially compromising thousands of
A sophisticated malware campaign dubbed “Weedhack” is actively targeting Minecraft players through malicious YouTube videos promoting fake game cheats and hacks. The operation delivers CountLoader malware, which has infected over 86,000 systems, subsequently deploying cryptocurrency miners and infor
Google’s June 2026 Android security update patches 124 vulnerabilities across multiple components, including one zero-day flaw (CVE-2026-XXXXX) actively exploited in the wild. The critical vulnerability affects the Android Framework and allows privilege escalation without user interaction. All suppo
Cybercriminals have developed sophisticated WordPress malware that leverages Steam Community user profiles as command-and-control (C2) infrastructure. The malware disguises malicious commands within seemingly legitimate gaming profiles, allowing attackers to evade traditional security detection mech
Google has unveiled a groundbreaking deepfake call detection system for Android devices, marking a significant advancement in combating AI-generated voice fraud. This new security feature leverages on-device machine learning to identify synthetic voices during phone calls in real-time, alerting user
Microsoft announced a comprehensive AI Security Framework at Build 2026, introducing enterprise-grade security controls spanning code generation, autonomous agents, and model deployment. The framework addresses critical vulnerabilities in AI-assisted development workflows, implements real-time threa
Russia’s Federal Security Service (FSB) has publicly accused Western intelligence agencies of orchestrating a sophisticated mobile device compromise campaign targeting Russian government officials and diplomatic personnel. The FSB claims thousands of Apple iPhones were converted into covert surveill
Anthropic has announced expanded access to Project Glasswing, a previously restricted AI model designed with enhanced security controls and monitoring capabilities. This move signals a significant shift in how advanced AI systems are deployed, balancing powerful capabilities with built-in safeguards
Microsoft has issued a public apology and reversed its stance following a heated dispute with a security researcher who disclosed a zero-day vulnerability. The tech giant initially threatened the researcher with legal action and refused a CVE assignment, sparking widespread criticism from the cybers
Microsoft has reversed its stance following a public confrontation with a security researcher over a zero-day vulnerability disclosure. The tech giant initially disputed the researcher’s findings and delayed patching, but mounting pressure from the security community forced a policy reassessment. Th