… BTMOB appears to be an evolution of the SpySolr malware family and is distributed via phishing websites masquerading as streaming services and cryptocurrency mining platforms. ESET reports that potential victims are redirected to portals mimicking Google Play and prompted to download the fake apps. …
… Fortinet released security updates for two critical flaws in FortiSandbox and FortiAuthenticator . Google released Android's May security bulletin , which fixes 10 vulnerabilities. …
Google accidentally exposed details of unfixed Chromium flaw By Bill Toulas May 21, 2026 02:13 PM Google has accidentally leaked details about an unfixed issue in Chromium that keeps JavaScript running in the background even when the browser is closed, allowing remote code execution on the device. …
Hackers abuse Google ads for GoDaddy ManageWP login phishing By Bill Toulas May 6, 2026 05:36 PM A phishing campaign delivered through Google sponsored search results is targeting credentials for ManageWP, GoDaddy’s platform for managing fleets of WordPress websites. …
… While Google Pixel devices will receive these security updates immediately, other vendors will often take longer to test and tweak them for specific hardware configurations. …
… The company added that its own network was not impacted by the incident. “Our investigation found no impact on NVIDIA-operated services. …
… Tycoon2FA adds device-code phishing According to new research from managed detection and response company eSentire, Tycoon2FA confirms that device code phishing has become highly popular among cybercriminals. “The attack begins when a victim clicks a Trustifi click-tracking URL in a lure email and … …
… Resilience After Takedowns Like other underground services, Lucifer also shows signs of operational resilience. …
… Public calendar service: Glassworm uses Google Calendar event titles as dead-drop locations for Base64-encoded C2 paths. …
… Administrators are urged to reserve time for core updates on May 20 between 17:00 and 21:00 UTC. …