cyber security

Fake Microsoft Support Scams Spread Through Online Ads as Researchers Uncover Organized Fraud Network

An organized fraud operation using paid advertisements, Microsoft Azure hosting, and centrally managed telephone numbers to distribute counterfeit Microsoft support…

2 days ago

Hackers Abuse LuaJIT and Windows Process Injection to Hide XLoader Credential-Stealing Malware

A new XLoader infection chain. It hides the credential stealer inside an embedded LuaJIT interpreter. It moves it into another…

2 days ago

Hackers Use Stolen Credentials to Fake Major Data Breaches and Pressure Companies for Money

Hackers are using exposed credentials to access limited corporate data, then presenting that access as evidence of major breaches to…

2 days ago

Hackers Are Stealing ChatGPT and Claude Tokens That Changing Your Password May Not Stop

Infostealer malware is expanding into AI developer environments, harvesting authentication files that can preserve unauthorized access after a password reset.…

2 days ago

Hackers Disguise Malware as Popular Games and Software to Hijack Windows PCs

An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather…

2 days ago

Hackers Turn to AI Jailbreak Bundles as Researchers Uncover New Prompt Adware Technique

An AI jailbreak package that repeatedly modifies OpenAI Codex instructions to promote its author’s commercial service, showing how guardrail-bypass tools…

2 days ago

Researcher Discovers Path Traversal Flaw in Renault Navigation System That Enables Root Code Execution

A malicious SD card can give an attacker root-level code execution on the TomTom Carminat LIVE navigation unit used in…

3 days ago

Microsoft Analyzes 383,000 Security Vulnerabilities and Reveals Which Flaws Hackers Exploit Most

Microsoft’s analysis of approximately 383,000 disclosed vulnerabilities shows that attackers overwhelmingly favor weaknesses enabling system takeover rather than exploiting vulnerabilities…

3 days ago

Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware

A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point…

3 days ago

Hackers Exploit Critical Magento StyleSmuggler Vulnerability to Deploy PSK Agent RAT and Hijack Servers

Attackers exploited the critical StyleSmuggler vulnerability in Magento and Adobe Commerce to deploy PSK Agent, a remote access trojan enabling…

3 days ago