Collaborate Disseminate
Researchers at Acronis have discovered a malicious trojanized version of the Red Alert rocket warning app targeting Israeli Android users. Distributed via fake Home Front Command SMS messages, this spyware steals GPS data, SMS messages, and contact lis… Continue reading Hackers Spread Fake Red Alert Rocket Alert App to Spy on Israeli Users
A joint study by Google and GitGuardian reveals that over 2,600 valid TLS certificates, protecting Fortune 500 companies and government agencies, were compromised due to private key leaks on GitHub and DockerHub. Continue reading 900+ Certificates Used by Fortune 500, Governments Exposed by Key Leaks
Bitdefender research reveals Pakistani group APT36 is using AI-generated vibeware and trusted cloud services like Google Sheets to target Indian officials. Continue reading Pakistan-Linked APT36 Floods Indian Govt Networks With AI-Made ‘Vibeware’
Researchers at Zenity Labs uncover PleaseFix flaws in Perplexity’s Comet browser. See how zero-click calendar invites allow AI agents to steal 1Password credentials and personal files. Continue reading PleaseFix Flaw Lets Hackers Access 1Password Vault via Comet AI Browser
A new phishing campaign is using stolen certificates from TrustConnect Software PTY LTD to sign malware. By impersonating updates for Zoom and Microsoft Teams, hackers install RMM tools to gain persistent, privileged access to networks Continue reading Fake Zoom, Teams Meeting Invites Use Compromised Certificates to Drop Malware
The University of Hawaii Cancer Centre has confirmed a massive ransomware attack affecting 1.24 million people. Sensitive data, including Social Security numbers and historical voter records dating back to 1993, was compromised. Continue reading Ransomware Breach at University of Hawaii Cancer Center Affects 1.2M People
New research from IMDEA Networks reveals how unencrypted signals from tyre pressure sensors in brands like Toyota and Mercedes can be used for covert vehicle tracking. Learn how these low-cost systems can map out your daily routines and why current reg… Continue reading Car Tyre Sensors Can Be Used to Track Drivers Without Their Knowledge
Cybercriminals are now increasingly using Telegram to sell corporate access, malware subscriptions, and stealer logs, turning the messaging app into a fast cybercrime hub. Continue reading Telegram Increasingly Used to Sell Access, Malware and Stolen Logs
Hackers abuse the .arpa Top-Level Domain to host phishing scams, using IPv6 tunnels, reverse DNS tricks, and shadow domains to bypass security checks. Continue reading Hackers Abuse .arpa Top-Level Domain to Host Phishing Scams
Europol’s Project Compass targets The Com (aka 764 network), an online group exploiting minors. After 30 arrests, officials say the hunt for those involved is far from over. Continue reading Project Compass Targets 764 Network as 30 Arrested and Victims Rescued