Cybersecurity

Lurking Lizard uses fake 7-Zip installer to build proxy botnet

Threat actor Lurking Lizard has operated a residential proxy business since August 2022, using over 230 lookalike domains.The group lures victims with trojanized installers...

AI coding agents trigger security alarms by mimicking hackers

AI coding agents like Claude Code, Cursor, and OpenAI Codex are triggering endpoint detection rules designed for human attackers, according to a seven-day Sophos...

Ubiquiti patches critical flaws in UniFi products

Ubiquiti released emergency patches for seven critical vulnerabilities across its UniFi product line, with CVSS scores ranging from 9.0 to 10.0.The flaws affect UniFi...

Chinese APT UAT-7810 Refines Malware for ORB Network

Chinese APT group UAT-7810 is expanding its LapDogs ORB network by compromising networking devices with custom malwareThe group developed new malware variants including LONGLEASH,...

New Android Malware RedWing Sold on Telegram for Bank Fraud

A new Android malware operation called RedWing is being rented on Telegram as a ready-made bank-fraud serviceZimperium's zLabs discovered the operation, identifying it as...

Windows ID links teen to $2M jewelry heist

U.S. prosecutors linked a Scattered Spider hacker to a luxury jewelry retailer intrusion using a persistent Windows device ID, according to a newly unsealed...

Critical BeyondTrust bugs allow unauthenticated device takeover

BeyondTrust disclosed four pre-authentication vulnerabilities in its Remote Support (RS) and Privileged Remote Access (PRA) products.Two critical flaws (CVE-2026-40138 and CVE-2026-40139), each carrying a...

Iranian Cavern Manticore Hacks Israeli Firms

An Iranian state-backed hacking group is using a new modular C2 framework, Cavern, targeting Israeli IT and government sectors.The sophisticated framework uses three different...

Latest news

Senate CLARITY Act adds Dem customer protections

The US Senate is nearing a vote on the Digital Asset Market Clarity (CLARITY) Act, which is expected to...

FakeGit campaign uses 800 fake AI tools to spread SmartLoader malware

Cybersecurity researchers uncovered nearly 7,600 malicious GitHub repositories in the FakeGit campaign, with over 800 posing as AI skills...

Google’s New Frozen v2 Chip Aims for 2028 Launch

Google is developing a new server chip called Frozen v2, designed to optimize its Gemini AI model with a...