Real-time disclosures, zero-day alerts, and threat intelligence filtered for security leaders.
Apple has now made it possible for more iPhones still running iOS 18 to receive security updates that protect against the actively exploited DarkSword exploit kit. [...]
Source File
Hackers have targeted TrueConf conference servers in attacks that exploit a zero-day vulnerability, allowing them to execute arbitrary files on all connected endpoints. [...]
Source File
WhatsApp has notified approximately 200 users, primarily in Italy, that they were tricked into installing a counterfeit version of the messaging app that was actually government spyware. The fake application was built by SIO, an Italian surveillance technolog…
Source File
Karin Keller-Sutter, Switzerland’s finance minister and the country’s former president, has filed criminal charges for defamation and insult after Elon Musk’s AI chatbot Grok was prompted by an anonymous user to generate a torrent of sexist and vulgar remarks…
Source File
A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft accounts and provide advanced features for business email compromise attacks. [...]
Source File
The security update protects a raft of older iPhones and iPads from attacks linked to leaked hacking tools called DarkSword.
Source File
A new Android malware named NoVoice was found on Google Play, hidden in more than 50 apps that were downloaded at least 2.3 million times. [...]
Source File
Mark Lanier, the folksy Texas litigator who doubles as a part-time pastor, held a jar of M&Ms in front of the Los Angeles jury and told them that each one represented a billion dollars of Meta’s market capitalisation. There were, by that maths, roughly 1,400 …
Source File
Somewhere in Hasbro’s network, someone was where they should not have been. The $14.4 billion toy and entertainment conglomerate, owner of Peppa Pig, Transformers, Monopoly, Dungeons & Dragons, Nerf, Play-Doh, and Power Rangers ,disclosed on Wednesday that it…
Source File
The Meta-owned company said it identified around 200 users who were tricked into installing a fake version of WhatsApp that was actually Italian-made spyware.
Source File
A Windows utility tool was found vulnerable to a critical flaw that enabled RCE, DoS, and other risks.
Source File
Misconfigured AI agents can lead to data disclosure and other risks.
Source File