Tag: emerging threats
5091 articles
Google Play Infected by NoVoice Android Malware
Millions of Android users may have unknowingly downloaded malware from Google Play, with over 50 apps infected by the NoVoice Android malware family, which has already racked up at least 2.3 million installs. This shocking discovery highlights the vulnerability of mobile ecosystems to malicious code that can slip past store vetting.
LLMs Introduce New Vectors for Cyber Threats
Imagine a chatbot designed to streamline your workflow secretly leaking confidential information - a frightening possibility that's no longer just hypothetical. As large language models are rapidly integrated into everyday tools, a new wave of hidden vulnerabilities is emerging, threatening to turn convenience into a security nightmare.
Venom Stealer Platform Automates Data Theft with ClickFix Tactics
Imagine a silent thief lurking in the shadows of your digital life, quietly siphoning off sensitive info - and now, cybercriminals can easily access this capability with Venom Stealer, a new malware-as-a-service tool that automates data theft with alarming ease. This menacing platform is poised to revolutionize cybercrime, making it simpler than ever for attackers to steal credentials, cookies, and cryptocurrency assets.
UK to Spend £630K on Digital ID Public Consultation Panel
The UK government is investing £630,000 in a people's panel to gather public feedback on its proposed digital identity scheme, aiming to address concerns and build trust in the new system. But will this hefty price tag buy genuine public engagement or just political cover?
Axios Library Compromised in North Korea-Linked Supply Chain Attack
A widely-used JavaScript library, Axios, has been compromised in a supply-chain attack linked to North Korea, allowing attackers to secretly inject malicious code into millions of applications and systems. This sneaky move has sent shockwaves through the open-source software community, highlighting the vulnerability of even the most trusted code.
Valid Credentials Fuel Majority of Modern Cyber Intrusions
Most modern cyber intrusions aren't about dramatic break-ins, but rather attackers walking through the front door with valid credentials, making them harder to detect. This strategic shift from exotic exploits to ordinary access has led to quieter attacks and longer dwell times, catching defenders off guard.
Google Chrome Zero-Day Flaw CVE-2026-5281 Under Active Exploitation
Google just patched a zero-day vulnerability in Chrome (CVE-2026-5281) that's already being exploited in the wild, so it's crucial to update your browser ASAP to avoid potential risks. This urgent patch is a stark reminder that even secure software can become a target overnight.
Microsoft Flags WhatsApp-Delivered VBS Malware Bypassing Windows UAC
Beware of WhatsApp attachments from familiar numbers - they might be malicious VBS files designed to quietly hijack your Windows system. A sneaky new campaign uses decades-old scripting language to bypass Windows UAC and give attackers remote access.
Horabot Malware Targets Latin America, Europe in Sophisticated Phishing Drive
Beware of the sneaky Horabot malware that's targeting businesses and users in Latin America and Europe with cleverly disguised PDF attachments that deliver a devastating banking trojan. This sophisticated phishing campaign, linked to a notorious Brazilian cybercrime group, could be the ultimate cyber threat to your financial security.
Attackers Exploit Trusted Tools to Evade Cybersecurity Defenses
When the very tools you trust to keep your network safe are turned against you, who do you turn to? Imagine your familiar admin tools being hijacked by attackers, quietly compromising your defenses and leaving you vulnerable.
FBI Flags Chinese Mobile Apps as Privacy Threat
Think twice before downloading that free app - the FBI warns that Chinese mobile apps pose a significant risk to your privacy and national security, potentially exposing sensitive info like your contact list, location history, and more. Be cautious when using foreign-developed apps, especially those from Chinese developers, to protect your personal life.
Cognitive Security Exploits Target Subconscious Mind
Imagine a breach that bypasses firewalls and passwords, exploiting the millisecond-long mental shortcuts your brain takes before you're even aware of it - this is the unsettling reality of cognitive security exploits that target your subconscious mind. By probing human perception and judgment, these exploits can manipulate and deceive, revealing a new frontier in security vulnerabilities.
Google Patches Fourth Chrome Zero-Day Exploited in 2026 Attacks
Google just patched the fourth Chrome zero-day vulnerability of 2026, a sobering reminder that attackers are relentlessly targeting the browser ecosystem with increasingly sophisticated threats. This latest emergency fix highlights the urgent need for users to stay vigilant and up-to-date with the latest security patches.
Hackers Compromise Axios Package to Spread RAT Malware
A recent breach of the popular Axios npm package has exposed a critical supply chain vulnerability: hackers hijacked a maintainer account to spread remote access trojans, putting thousands of applications and developers at risk.
UK Manufacturers Face Rampant Cyberattacks, ESET Report Finds
UK manufacturers are under siege, with a staggering eight in ten experiencing a cyberattack in the past year, resulting in financial losses and a growing sense of vulnerability. As our critical infrastructure comes under threat, the question on everyone's mind is: how long before the chaos spills into our daily lives?
UK Manufacturers Hit by Widespread Cyberattacks
UK manufacturers are under attack, with nearly 80 percent experiencing a cyber incident in the past year, causing factory outages, lost revenue, and supply chain disruption. As cyber threats increasingly target the machines that keep production lines moving, manufacturers face a harsh reality: one devastating breach can bring their entire operation to a grinding halt.
Data Breaches Underscore Growing Pains in Secure Storage
In today's digital age, the thing that keeps your personal and professional life safe can suddenly become its biggest vulnerability - and that's a growing concern that's on everyone's mind. As data breaches continue to make headlines, it's clear that data security is no longer just an IT issue, but a pressing matter that affects us all.
Google Links Axios npm Breach to North Korea's UNC1069 Group
Google's threat intelligence team has linked a recent breach of the Axios npm package to UNC1069, a North Korean hacking group motivated by financial gain. This alarming discovery highlights the vulnerability of the software supply chain to state-linked cybercrime.
Anthropic Confirms Claude Code Source Leaked via npm Error
A recent mishap at Anthropic led to the public leak of internal code for its AI coding assistant, Claude Code, due to a simple human error during the npm packaging process. Fortunately, the company confirmed that no sensitive customer data was exposed, and swift action can mitigate the impact of this isolated incident.
Google Bolsters Drive Security with Default Ransomware Detection
Google just supercharged Drive's security by activating its AI-powered ransomware detection feature by default for paying customers, giving them an extra layer of protection against malicious attacks. This move means organizations using Google Workspace tiers can breathe a sigh of relief, knowing their cloud storage is now equipped with automated threat detection and alerts.
Microsoft Issues Emergency Patch for Windows 11 Update Glitch
Thousands of IT admins faced a nightmare when a recent Windows 11 update caused installation failures, but Microsoft swiftly came to the rescue with an emergency patch to fix the glitch. The surprise repair update addresses issues introduced by the March 2026 non-security preview update, ensuring a smooth rollout for users.
Phantom Stealer Emerges as Sophisticated Stealer-as-a-Service Tool
Imagine your entire online life being stolen and sold for just a few hundred dollars - that's the harsh reality with Phantom Stealer, a powerful and stealthy tool that's making it easy for cybercriminals to get their hands on your sensitive information. This sophisticated .NET-based stealer can harvest everything from login credentials to payment card details, putting your digital identity at risk.
Uranium Finance Hack Exposed: Maryland Man Charged in $53m Crypto Heist
A Maryland man has been charged with stealing $53 million from Uranium Finance, a decentralized finance protocol, by exploiting weaknesses in smart contracts and then attempting to launder the proceeds through a complex web of cryptocurrency transactions. This brazen heist highlights the vulnerability of DeFi systems and the creative - yet illicit - tactics used by hackers to cash in.
Anthropic Exposes Closed-Source Code in NPM Package Leak
A single character typo in a package manifest led to a major oops for Anthropic, the creators of Claude AI, as they accidentally leaked the source code for their closed-source language model, Claude Code. Fortunately, the company quickly acknowledged the mistake and assured that no customer data or credentials were compromised.