cyber security
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Profile Victims and Rank Stolen Data
A self-deleting Windows infostealer named VOLTA uses commercial AI models to turn stolen credentials, sessions, and cryptocurrency data into prioritized victim assessments.
The malware,...
cyber security
Cisco Talos Uncovers KeyDrift Malware Targeting SD-WAN Controllers to Steal Network Encryption Keys
UAT-11473, an advanced persistent threat actor deploying KeyDrift, a custom malware framework targeting Cisco Catalyst SD-WAN controllers.
The framework embeds inside legitimate control-plane processes...
Chrome
319 Suspicious Chrome Extensions Hijack Default Search Settings Without Sensitive Permissions
An investigation into browser extensions identified 319 suspicious extensions linked to about 13.4 million reported users, exposing a search-hijacking ecosystem operating since 2016.
Marketed...
cyber security
Volt Typhoon Hackers Exploit Multiple Zero-Days to Breach U.S. Critical Infrastructure Networks
Chinese state-sponsored hacking group Volt Typhoon has exploited multiple previously unknown vulnerabilities in enterprise management platforms to penetrate strategically significant organizations.
Its investigation exposed...
cyber security
Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses
An alleged leak from cryptocurrency swap service Wagyu.xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero receiving addresses, and client IP addresses.
The...
cyber security
INJ3CTOR3 Malware Steals FreePBX Credentials to Enable Fraudulent Calls Even After Server Cleanup
INJ3CTOR3 has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorized calls to victims even after infected servers are...
Cloudflare
Hackers Turn Compromised Websites Into Fake Cloudflare Verification Traps for Windows and Mac Users
Attackers are using compromised websites to present fake Cloudflare verification pages that steer Windows and macOS users toward executing malicious commands.
The findings establish...
Android
CyberDakait Hackers Target Indian Banking Users, Compromise 17,960 Android Devices
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025.
Researchers identified at least 17,960 compromised devices and 7,611,443 intercepted...