Just Visiting the Wrong Website Was Enough: A Watering-Hole Campaign Used Already-Patched Bugs to Raid Unupdated Phones
No suspicious link, no attachment, no app to install. In a campaign described by researchers at Sekoia, simply loading a...
Trending
The Malware Came From the Factory: How Google Tore Down a 1.3 Million-Device TV Box Botnet
Most botnets are built by breaking into devices. The one Google and its partners dismantled this week was, according to...
Meet VOLTA, the Infostealer That Hands Your Stolen Data to an AI and Asks What You’re Worth
Infostealers have long been a volume business: grab every password and cookie from thousands of machines, then sort through the...
One Text Message Can Knock an Unpatched Android Phone Off the Network: Your Questions About the “SMS of Death” Answered
A researcher has published working code for an Android bug that lets anyone with the right message knock a phone...
One Click on a Shared ChatGPT Link Was Enough to Read Someone’s Private Chats. OpenAI Has Fixed It. Here Is How the Trick Worked
Shared ChatGPT conversations get passed around all the time: in email, in team chats, in support tickets and on social...
Eleven Hours, Up to 5,000 Developers: A Tampered Claude Code Extension Quietly Opened an SSH Back Door. The Timeline and the Cleanup
Developers who use AI coding assistants inside their editors got an unwelcome reminder on Thursday that extensions are software too,...
Virtualine, by the Numbers: The Web Host That Bragged About Ignoring Abuse Reports Loses Its Domain and Dozens of Servers
Criminals need somewhere to park their phishing pages, malware and stolen data. For several years, a provider called Virtualine sold...
A Ransomware Affiliate Who Worked for Both Nefilim and Hive Gets Nearly Six Years in U.S. Prison
A U.S. federal court has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for carrying out ransomware...
Case File: A Former Penetration Tester, an AI Attack Framework, 90 Breached Organizations and 8.2 Million Stolen Records
Police in Seoul have put a face on one of the big worries about AI in cybercrime: that it lets...
A Text File Sitting in Downloads Tried to Turn an AI Coding Agent Against Its Owner. The Attack, One Step at a Time
AI coding agents are built to be helpful, and part of being helpful is reading the notes left for them....
