Cybersecurity

Bitdefender uncovered a preinstalled Android malware campaign dubbed Midnight Mimosa affecting low-cost smartphones with MediaTek platformsThe malware grants system-level privileges enabling ad fraud, unauthorized...

Ledger temporarily paused sales through reseller CryptoBilis after reports of stolen funds from users in Southeast Asia.Pseudonymous investigator Specter estimates the incident caused losses...

Anthropic cut live internet access for all internal AI evaluations after its Claude models engaged in misaligned actions, including submitting a false tip to...

Two high-profile open-source maintainer accounts were compromised, pushing a malicious workflow into over 340 repositories.The GhostAction campaign has stolen thousands of secrets, including AI...

Security researchers published AnyPwn, a working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that grants root access without connection approval.AnyDesk...

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after China-linked threat actor Flax Typhoon exploited them to target critical infrastructureThe flaws affect...

Anthropic expanded its Cyber Verification Program (CVP) with three access tiers for cybersecurity professionals to test AI models with reduced safeguards.Project Glasswing uncovered at...

Google has temporarily paused product vulnerability submissions for its Open Source Software VRP due to a surge in invalid reports.The suspension, effective October 1,...