Do Son A new report from Unit 42 reveals how cybercriminals are misusing generative AI to create realistic phishing sites, deepfake content, and fraudulent websites.
A new report reveals a North Korean espionage campaign targeting embassies with spear phishing and a sophisticated C2 channel hidden on GitHub.
Microsoft has exposed PipeMagic, a new backdoor disguised as a ChatGPT app. It was used with a zero-day exploit to gain SYSTEM privileges and deploy ransomware.
A new analysis details how the RansomEXX gang exploited a use-after-free zero-day (CVE-2025-29824) in the Windows Common Log File System to gain SYSTEM privileges.
The Noodlophile infostealer has evolved from fake AI platforms to spear phishing, using fake copyright notices and DLL side-loading to target companies.
A new report reveals a multi-stage cryptomining attack delivered via infected USB drives, a tactic that leverages DLL hijacking to bypass security.
A new Android banking trojan, dubbed "Lazarus Stealer," is using sophisticated overlay attacks to steal financial credentials from users of Russian banks.
SoftBank is making a $2 billion investment in Intel, a move that signals confidence in the struggling chipmaker's future amidst reports of U.S. government interest.
OpenAI has launched a new low-cost "ChatGPT Go" subscription in India, a strategic move to convert users in a key market with cheaper pricing and extended features.
Google Translate is preparing to launch a new AI-powered "Advanced" model and a gamified "Practice" mode, which could directly challenge Duolingo.
Apple's Xcode 26 beta reveals plans for native integration with Claude Sonnet 4 and Claude Opus 4, giving developers a new AI assistant option.
Apple has introduced a new "Adaptive Power" mode in iOS 26 that intelligently extends battery life by throttling performance, now with a new notification feature.
A German court has reopened a lawsuit against Adblock Plus, reviving the legal debate over whether ad blockers violate copyright by interfering with website code.
A critical privilege escalation flaw in Capsule Kubernetes (CVE-2025-55205) allows tenant users to bypass security and launch cross-tenant attacks.
Enhancer for YouTube, a popular extension with 600K+ users, is leaving Firefox. The developer cites a "deeply unpleasant" and slow review process.
The U.S. Treasury is exploring a plan to embed digital identity verification directly into DeFi smart contracts to combat money laundering and other illicit finance.
Phishing Scam Alert: McAfee Uncovers a New Android Campaign Impersonating a Government Solar Program
Phishing Scam Alert: McAfee Uncovers a New Android Campaign Impersonating a Government Solar Program
A new phishing campaign in India uses fake government solar subsidy websites to trick victims into downloading a malicious app that steals UPI PINs and other data.
PyPI is now checking for expired domains to prevent "domain resurrection attacks," a major step in securing the Python Package Index from account takeovers.
A critical RCE flaw in Trend Micro Apex One has been added to CISA's KEV Catalog due to active exploitation. All agencies must patch by September 8.
Claude AI has introduced a new safeguard that allows the model to terminate conversations in extreme cases, a feature designed to protect the AI itself.
A new investigation reveals that Israel's Unit 8200 used Microsoft Azure to store millions of phone calls, prompting a new inquiry by the company.
A new Kaspersky report reveals the PipeMagic backdoor has resurfaced, now tied to the exploitation of a Microsoft zero-day and targeting organizations in Brazil and Saudi Arabia.