Cybersecurity

Approved third-party Android stores get one-tap installs and background updates from December 1.Qualifying stores must submit their full catalog for malware scanning and pay...

The U.S. Department of Justice seized the domain of bulletproof hosting provider Virtualine, alleging it facilitated child sexual abuse material distribution and international money...

Apple backported a high-severity patch for CVE-2026-86950, an out-of-bounds write in CoreGraphics exploited in targeted attacks.The vulnerability previously addressed in iOS 26.7.1 and macOS...

The Australian Signals Directorate (ASD) disrupted a major Amadey malware operation, severing the criminal's access to 180,000 infected computers worldwide.ASD gained access to the...

Over 950 online stores, primarily running Magento, have been infected since July 2025 in a campaign that injects malicious JavaScript via CMS blocks.The threat...

Wasmtime patched two critical sandbox escapes, both rated 9.9.One flaw affects only ARM64; no attacks reported.Updates: 36.0.19, 48.0.7, 49.0.4, and 50.0.0. Two critical flaws in...

Attackers stole 497 Microsoft 365 sign-in tokens across 79 organizations using adversary-in-the-middle relays, compromising 97 accounts.The threat actors replayed stolen tokens instead of guessing...

Google updated its privacy policy to allow personalized ads based on data from connected services like Gmail and Photos when users enable Personal Intelligence...