Threat actors are leveraging Microsoft Graph API reconnaissance techniques to identify and target payroll and HR employees within organizations, ultimately exfiltrating sensitive salary data. By abusing legitimate Graph API permissions and queries, attackers blend reconnaissance activities with norm
Cybercriminals are exploiting Google’s advertising platform to distribute a sophisticated macOS backdoor dubbed “FlutterBridge.” The campaign uses malicious ads that appear at the top of Google search results, mimicking legitimate software downloads. When users click these ads, they’re redirected to
A critical cryptographic vulnerability in Zcash’s shielded transaction system could have allowed attackers to create unlimited counterfeit coins without detection. Discovered and secretly patched in 2018, the flaw affected the zero-knowledge proof system that underpins Zcash’s privacy features. The
A critical integer overflow vulnerability (ZDI-26-332) in QEMU’s `calc_image_hostmem` function allows authenticated local attackers to escalate privileges on affected systems. The flaw stems from improper integer validation when calculating image host memory, potentially enabling attackers to break
The U.S. Department of Justice has seized over 400 domains allegedly used to illegally stream FIFA World Cup content, marking one of the largest anti-piracy enforcement actions in recent years. This coordinated operation targeted websites providing unauthorized access to premium sports content, high
Two decades after Apple’s historic transition to Intel processors in 2006, the company has come full circle by moving to its own Apple Silicon chips. This journey reveals a fascinating evolution in hardware security architecture, from the limited protections of PowerPC Macs through Intel’s x86 vulne
Federal law enforcement agencies have seized two cryptocurrency mixing services, AudiA6 and Dark2Web, as part of a massive $389 million money laundering investigation. The operation, coordinated across multiple jurisdictions, targeted platforms that facilitated the laundering of illicit proceeds fro
GitLab has released security updates addressing multiple critical vulnerabilities in both Community Edition (CE) and Enterprise Edition (EE), including severe flaws in its Duo AI features, authorization bypass issues, and denial-of-service (DoS) vectors. The most severe vulnerabilities allow unautho
Free streaming apps available on popular smart TV platforms are secretly converting millions of devices into residential proxy networks used for AI data scraping operations. These applications, marketed as free entertainment solutions, embed software development kits (SDKs) that route third-party we
A critical security vulnerability in the WP Maps Pro WordPress plugin allows unauthenticated attackers to create rogue administrator accounts on vulnerable websites. The flaw stems from improper authentication controls in the plugin’s user management functionality, enabling complete site takeover. W