…says hackers stole corporate data in cyberattack Real emails, hijacked payments: Two H1 2026 attack chains COLDCARD security audit phishing attack installs remote access tool How AI-powered phishing killed blocklists for…
…Guardio researchers mention another scenario where hackers can hijack WhatsApp accounts. By leveraging the same DOM-control functionality, an attacker could replace the device-linking QR code for WhatsApp to take control…
…As cybersecurity company Kaspersky revealed on Tuesday, hackers trojanized DAEMON Tools Lite installers and used them to backdoor thousands of systems from more than 100 countries that downloaded the software from the…
…Requiring device manufacturers to pre-install Google Search and Chrome in order to license the Play Store. Requiring manufacturers not to sell devices running Android versions not approved by Google (anti-fragmentation…
…800 internal repositories after an employee installed a malicious VS Code extension. GitHub is investigating a breach of its internal repositories after the TeamPCP hacker group claimed to have accessed approximately 4…
…Starting in version 12, npm install will not run preinstall, install, or postinstall scripts from dependencies unless they have been explicitly approved. This also applies to native module builds triggered through node…
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks By Lawrence Abrams May 30, 2026 02:02 PM Palo Alto Networks is warning that hackers are now exploiting a PAN…
…Expel’s security researcher Marcus Hutchins explains that the attacks direct the victim to install a fake “PowerShell Cleaner” executable (.MSI) hosted in Microsoft Azure, making the download appear trustworthy. Analysis of…
…A flaw in the installer allowed a standard user to launch PowerShell from the installation interface, causing the shell to inherit the installer's privileges. BleepingComputer tested the vulnerability at the time…
…Kaspersky said the Head Mare hacktivist group has been exploiting CVE-2026-72529 and CVE-2026-72530 since at least July 2026 to replace client installers with malicious versions designed to deploy…