Emerging Threats
Hackers Exploit TrueConf Flaw to Deploy Malicious Updates
Imagine the video conferencing platform you rely on to connect with your team being turned against you, allowing hackers to spread malicious software to everyone in the room. A recently discovered zero-day flaw in TrueConf's update mechanism has been exploited by threat actors to deliver and execute malicious files on connected devices.
CERT-UA Warns of AGEWHEEZE Malware Spread via Impersonation Campaign
Beware of scammers impersonating Ukraine's cyber emergency team, CERT-UA, in a massive phishing campaign that sent nearly one million emails with a malicious payload. The attackers used a clever tactic, disguising their malware, known as AGEWHEEZE, as a legitimate warning from a trusted source.
Google Play Infected by NoVoice Android Malware
Millions of Android users may have unknowingly downloaded malware from Google Play, with over 50 apps infected by the NoVoice Android malware family, which has already racked up at least 2.3 million installs. This shocking discovery highlights the vulnerability of mobile ecosystems to malicious code that can slip past store vetting.
Venom Stealer Platform Automates Data Theft with ClickFix Tactics
Imagine a silent thief lurking in the shadows of your digital life, quietly siphoning off sensitive info - and now, cybercriminals can easily access this capability with Venom Stealer, a new malware-as-a-service tool that automates data theft with alarming ease. This menacing platform is poised to revolutionize cybercrime, making it simpler than ever for attackers to steal credentials, cookies, and cryptocurrency assets.
Axios Library Compromised in North Korea-Linked Supply Chain Attack
A widely-used JavaScript library, Axios, has been compromised in a supply-chain attack linked to North Korea, allowing attackers to secretly inject malicious code into millions of applications and systems. This sneaky move has sent shockwaves through the open-source software community, highlighting the vulnerability of even the most trusted code.
Google Chrome Zero-Day Flaw CVE-2026-5281 Under Active Exploitation
Google just patched a zero-day vulnerability in Chrome (CVE-2026-5281) that's already being exploited in the wild, so it's crucial to update your browser ASAP to avoid potential risks. This urgent patch is a stark reminder that even secure software can become a target overnight.
Microsoft Flags WhatsApp-Delivered VBS Malware Bypassing Windows UAC
Beware of WhatsApp attachments from familiar numbers - they might be malicious VBS files designed to quietly hijack your Windows system. A sneaky new campaign uses decades-old scripting language to bypass Windows UAC and give attackers remote access.
Horabot Malware Targets Latin America, Europe in Sophisticated Phishing Drive
Beware of the sneaky Horabot malware that's targeting businesses and users in Latin America and Europe with cleverly disguised PDF attachments that deliver a devastating banking trojan. This sophisticated phishing campaign, linked to a notorious Brazilian cybercrime group, could be the ultimate cyber threat to your financial security.
Google Patches Fourth Chrome Zero-Day Exploited in 2026 Attacks
Google just patched the fourth Chrome zero-day vulnerability of 2026, a sobering reminder that attackers are relentlessly targeting the browser ecosystem with increasingly sophisticated threats. This latest emergency fix highlights the urgent need for users to stay vigilant and up-to-date with the latest security patches.
Hackers Compromise Axios Package to Spread RAT Malware
A recent breach of the popular Axios npm package has exposed a critical supply chain vulnerability: hackers hijacked a maintainer account to spread remote access trojans, putting thousands of applications and developers at risk.
Phantom Stealer Emerges as Sophisticated Stealer-as-a-Service Tool
Imagine your entire online life being stolen and sold for just a few hundred dollars - that's the harsh reality with Phantom Stealer, a powerful and stealthy tool that's making it easy for cybercriminals to get their hands on your sensitive information. This sophisticated .NET-based stealer can harvest everything from login credentials to payment card details, putting your digital identity at risk.
Iran Launches Alarming Password-Spraying Attacks on M365 Accounts
As Iran's missile strikes leave destruction in their wake, a stealthier threat is emerging: coordinated password-spraying attacks targeting Microsoft 365 accounts of municipal authorities in the region. This sinister campaign seems to be exploiting the chaos, striking when defenses are down.
Alarming Rise in Employee Data Breaches Hits Seven-Year High
Employee data breaches have reached a seven-year high, exposing a harsh reality: even the most basic security measures are being overlooked, putting sensitive employee information at risk. Can organizations protect their most valuable asset - their employees' personal data - from these preventable breaches?
Critical AI Deepfake Risks Exposed as Big Tech Fails to Provide Answers
As AI-generated deepfakes become increasingly sophisticated, the risk of being deceived has never been higher - and it's clear that Big Tech is struggling to keep up. With misinformation spreading like a virus, it's time for tech giants to take responsibility and work towards effective countermeasures.
UK Sanctions Critical Chinese Crypto Marketplace Amid Alarming Southeast Asia Scam Surge
The UK has taken a bold stance against crypto crime by sanctioning Xinbi, a major Chinese marketplace accused of fueling Southeast Asia's alarming scam surge. Can this move spark a turning point in the battle against illicit finance in the rapidly evolving world of digital currencies?
Critical Maritime Threat: Alarming Rise in Underwater Attack Drones Spurs Urgent Tech Hunt
The US and UK are racing against time to outsmart a growing maritime threat: underwater attack drones that can devastate ships, harbors, and critical infrastructure. With a joint call for tech tenders and a tight deadline of April 3, they're on a mission to find cutting-edge solutions before it's too late.
China Targets Southeast Asia with Alarming 2025 Cyber Campaign
China's latest cyber campaign, targeting Southeast Asia in 2025, exposes the alarming vulnerabilities of even the most secure digital fortresses, with three China-linked threat clusters deploying sophisticated malware to gather intelligence and exert influence. This brazen move raises urgent concerns about the future of cyber espionage and the safety of our digital lives.
Malware Strikes: Critical Wiper Attack Targets Iran
A new wave of malware has struck, targeting Iran with a destructive wiper attack that wipes data from infected systems, blurring the lines between cybercrime and cyberwarfare. This brazen threat, dubbed CanisterWorm, exploits weak cloud security to spread its digital destruction.
Crypto Scam ShieldGuard Dismantled in Stunning Malware Bust
The ShieldGuard Chrome extension, sold as a crypto safeguard, quietly stole private keys and drained wallets — a stark reminder that a browser helper can easily become a thief. Find out how investigators tore it down and what steps to take now to protect your assets.
France Sees Stunning Positive Drop in Ransomware 2025
Good news from France: a stunning 35% drop in ransom payments in 2025 shows ransomware’s profit model is faltering — but small businesses still bear the brunt of attacks.
Hacked App Exclusive: Damaging US-Israel Iran Propaganda
When millions of BadeSaba Calendar users woke to cryptic Help has arrived alerts amid explosions, a common prayer‑time app suddenly became the center of speculation about a coordinated info operation. It’s a vivid reminder that everyday apps can be hijacked to shape public perception in moments of crisis.
Ex-L3Harris exec jailed 7 years in stunning, damaging plot
A former Trenchant manager who oversaw offensive cyber tools at L3Harris was sentenced to seven years after allegedly selling zero‑day exploits and internal tooling to a Russian buyer for about $1.3 million. It’s a stark reminder of how insider access can turn trusted national‑security capabilities into dangerous weapons.
North Korean Lazarus Group Exclusive: Dangerous Medusa Surge
When hospitals open their doors, their networks shouldnt open to extortion — but a surge in Medusa ransomware tied to North Koreas Lazarus Group is forcing technologists, health‑care leaders and policymakers to decide how to lock them. These attacks — a blend of state‑grade tools and criminal tactics — risk disrupted care, delayed diagnoses and real harm to patients.
Cost of Insider Incidents: Stunningly Costly, Near $20M
Think insider incidents are minor? Think again—the cost of insider incidents can skyrocket to nearly $20 million, and this post shows where that money goes and how to stop the bleed.