A newly identified threat actor known as GhostShell has emerged with targeted phishing campaigns against Ukraine’s drone defense sector. The group employs advanced social engineering techniques combined with malicious payloads designed to compromise critical defense infrastructure. This campaign rep
Security researchers have uncovered a novel attack technique called “CSS Bomb” that weaponizes Cascading Style Sheets (CSS) to transform malicious emails into real-time keyloggers. When victims open these specially crafted emails in web-based email clients, the embedded CSS code captures every keyst
Russian authorities have charged Telegram founder and CEO Pavel Durov with aiding terrorism and issued an international arrest warrant. The charges stem from allegations that Telegram’s encrypted messaging platform has been used to coordinate terrorist activities, with Russian prosecutors claiming D
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These campaigns leverage YouTube tutorials, TikTok videos, and Instagram posts promising free account upgrades, but instead deliver sophisticated inf
Critical vulnerabilities in the Connective eID browser extension expose over 2 million Belgian citizens to remote code execution (RCE) and PIN theft attacks. The flaws affect the extension used for national electronic identification, allowing malicious websites to trigger arbitrary code execution an
An author’s reliance on AI language models resulted in fabricated quotes being published in a book about truth and authenticity. Despite discovering the synthetic content, the author defended continued AI usage, highlighting a critical vulnerability in AI-assisted content creation: hallucination wit
Acer is actively working to patch a critical zero-day vulnerability affecting its Wave 7 mesh router series. The flaw, which has been exploited in the wild before a patch became available, allows attackers to compromise router security and potentially gain unauthorized access to network traffic. Use
A sophisticated supply chain attack has compromised 32 Red Hat packages after attackers gained control of a maintainer’s GitHub account. The Miasma malware, embedded within these packages, poses significant risks to Red Hat Enterprise Linux (RHEL) and Fedora users. The malicious code was designed to
A significant supply chain attack has compromised over 400 packages in the Arch User Repository (AUR), injecting malicious code designed to install a rootkit and infostealer on Linux systems. The malware establishes persistence, exfiltrates sensitive data, and provides attackers with backdoor access
7-Zip version 26.02 has been released to address a critical remote code execution (RCE) vulnerability that could allow attackers to execute arbitrary code through specially crafted archive files. Users should immediately update to the latest version to protect against potential exploitation. The fla