Collaborate Disseminate
Researchers at Zenity Labs uncover PleaseFix flaws in Perplexity’s Comet browser. See how zero-click calendar invites allow AI agents to steal 1Password credentials and personal files. Continue reading PleaseFix Flaw Lets Hackers Access 1Password Vault via Comet AI Browser
A new phishing campaign is using stolen certificates from TrustConnect Software PTY LTD to sign malware. By impersonating updates for Zoom and Microsoft Teams, hackers install RMM tools to gain persistent, privileged access to networks Continue reading Fake Zoom, Teams Meeting Invites Use Compromised Certificates to Drop Malware
The University of Hawaii Cancer Centre has confirmed a massive ransomware attack affecting 1.24 million people. Sensitive data, including Social Security numbers and historical voter records dating back to 1993, was compromised. Continue reading Ransomware Breach at University of Hawaii Cancer Center Affects 1.2M People
New research from IMDEA Networks reveals how unencrypted signals from tyre pressure sensors in brands like Toyota and Mercedes can be used for covert vehicle tracking. Learn how these low-cost systems can map out your daily routines and why current reg… Continue reading Car Tyre Sensors Can Be Used to Track Drivers Without Their Knowledge
Cybercriminals are now increasingly using Telegram to sell corporate access, malware subscriptions, and stealer logs, turning the messaging app into a fast cybercrime hub. Continue reading Telegram Increasingly Used to Sell Access, Malware and Stolen Logs
Hackers abuse the .arpa Top-Level Domain to host phishing scams, using IPv6 tunnels, reverse DNS tricks, and shadow domains to bypass security checks. Continue reading Hackers Abuse .arpa Top-Level Domain to Host Phishing Scams
Europol’s Project Compass targets The Com (aka 764 network), an online group exploiting minors. After 30 arrests, officials say the hunt for those involved is far from over. Continue reading Project Compass Targets 764 Network as 30 Arrested and Victims Rescued
Hackers took over Iran’s BadeSaba Calendar prayer app, sending “Help Is on the Way” alerts and messages urging soldiers to lay down weapons. Continue reading Popular Iranian App BadeSaba was Hacked to Send “Help Is on the Way” Alerts
ShinyHunters hackers leak 2 million records from Dutch telecom Odido after ransom refusal, claiming up to 21 million customer records were stolen in the breach. Continue reading ShinyHunters Leak 2M Records From Dutch Telecom Odido, Claim 21M Stolen
Is your AI assistant safe? Oasis Security researchers have found a critical ClawJacked vulnerability in OpenClaw that allows hackers to hijack AI agents through a simple browser tab. Continue reading ClawJacked Vulnerability in OpenClaw Could Let Websites Hijack AI Agents