Google’s June 2026 Android security update patches 124 vulnerabilities across multiple components, including one zero-day flaw (CVE-2026-XXXXX) actively exploited in the wild. The critical vulnerability affects the Android Framework and allows privilege escalation without user interaction. All suppo
Cybercriminals have developed sophisticated WordPress malware that leverages Steam Community user profiles as command-and-control (C2) infrastructure. The malware disguises malicious commands within seemingly legitimate gaming profiles, allowing attackers to evade traditional security detection mech
Google has unveiled a groundbreaking deepfake call detection system for Android devices, marking a significant advancement in combating AI-generated voice fraud. This new security feature leverages on-device machine learning to identify synthetic voices during phone calls in real-time, alerting user
Microsoft announced a comprehensive AI Security Framework at Build 2026, introducing enterprise-grade security controls spanning code generation, autonomous agents, and model deployment. The framework addresses critical vulnerabilities in AI-assisted development workflows, implements real-time threa
Russia’s Federal Security Service (FSB) has publicly accused Western intelligence agencies of orchestrating a sophisticated mobile device compromise campaign targeting Russian government officials and diplomatic personnel. The FSB claims thousands of Apple iPhones were converted into covert surveill
Anthropic has announced expanded access to Project Glasswing, a previously restricted AI model designed with enhanced security controls and monitoring capabilities. This move signals a significant shift in how advanced AI systems are deployed, balancing powerful capabilities with built-in safeguards
Microsoft has issued a public apology and reversed its stance following a heated dispute with a security researcher who disclosed a zero-day vulnerability. The tech giant initially threatened the researcher with legal action and refused a CVE assignment, sparking widespread criticism from the cybers
Microsoft has reversed its stance following a public confrontation with a security researcher over a zero-day vulnerability disclosure. The tech giant initially disputed the researcher’s findings and delayed patching, but mounting pressure from the security community forced a policy reassessment. Th
Cybercriminals have developed sophisticated WordPress malware that conceals command-and-control (C2) communications within Steam gaming platform profile comments. This novel obfuscation technique exploits Steam’s legitimate infrastructure to evade detection by security tools, allowing attackers to m
AI-powered exploitation tools are fundamentally changing vulnerability management by reducing the time between disclosure and active exploitation from weeks to hours. Attackers now leverage large language models and automated reconnaissance systems to generate working exploits faster than organizati