Collaborate Disseminate
AI security firm Mindgard discovered a flaw in OpenAI’s Sora 2 model, forcing the video generator to leak… Continue reading Mindgard Finds Sora 2 Vulnerability Leaking Hidden System Prompt via Audio
Old DarkComet RAT spyware is back, hiding inside fake Bitcoin wallets and trading apps to steal credentials via keylogging. Continue reading DarkComet Spyware Resurfaces Disguised as Fake Bitcoin Wallet
North Korea-linked KONNI hackers used KakaoTalk and Google Find Hub to spy on victims and remotely wipe Android devices in a targeted phishing campaign. Continue reading Hackers Use KakaoTalk and Google Find Hub in Android Spyware Attack
Veracode Threat Research exposed a targeted typosquatting attack on npm, where the malicious package @acitons/artifact stole GitHub tokens. Learn how this supply chain failure threatened the GitHub organisation’s code. Continue reading Fake NPM Package With 206K Downloads Targeted GitHub for Credentials
Intel, the leading computer chip maker, has filed a lawsuit seeking at least $250,000 in damages from a… Continue reading Intel Sues Ex-Engineer for Stealing 18,000 ‘Top Secret’ Files
Unit 42 discovered LANDFALL, commercial-grade Android spyware, which used a hidden image vulnerability (CVE-2025-21042) to remotely spy on Samsung Galaxy users via WhatsApp. Update your phone now. Continue reading LANDFALL Spyware Targeted Samsung Galaxy Phones via Malicious Images
Monsta FTP users must update now! A critical pre-authentication flaw (CVE-2025-34299) allows hackers to fully take over web servers. Patch to version 2.11.3 immediately. Continue reading Monsta FTP Vulnerability Exposed Thousands of Servers to Full Takeover
The FBI has issued a federal subpoena to domain registrar Tucows, demanding extensive billing and session records to unmask the anonymous operator of Archive.ph (Archive.is and Archive.today). The site, known for bypassing paywalls, is now the subject … Continue reading FBI Wants to Know Who Runs Archive.ph
Cybersecurity firm Sekoia reports a widespread fraud where criminals compromise hotel systems (Booking.com, Expedia and others) with PureRAT malware, then use stolen reservation data to phish and defraud guests. Continue reading “I Paid Twice” Scam Infects Booking.com Users with PureRAT via ClickFix
Bolster AI reveals a new scam using a simple JS code via Emkei’s Mailer to fake 37% profits and steal crypto. Act fast to secure your wallet. Continue reading Fake 0-Day Exploit Emails Trick Crypto Users Into Running Malicious Code