Cybersecurity

A new phishing kit called Starkiller uses live proxying of legitimate login pages to bypass multi-factor authentication (MFA) effectively.Separate campaigns are evolving to target...

Google Chrome patched a critical privilege escalation flaw (CVE-2026-0628) in its browser in January 2026.The vulnerability allowed specially crafted malicious extensions to hijack the...

Google Cloud API keys embedded in public website code can be abused to authenticate to Gemini AI endpoints.Researchers found nearly 3,000 exposed keys and...

The U.S. Department of Defense has designated AI firm Anthropic as a national security supply chain risk.The conflict stems from Anthropic's refusal to allow...

The U.S. Department of Justice seized $61 million in Tether linked to "pig butchering" cryptocurrency scams.Scammers use social engineering on dating apps to build...

A malicious Go module impersonates a legitimate "golang.org/x/crypto" library to steal secrets.The malware harvests passwords, creates SSH backdoor access, and deploys the Linux backdoor...

Attackers are distributing a new Remote Access Trojan (RAT) disguised as gaming software through browsers and chat apps.The malware uses stealthy techniques, modifies Microsoft...

A new botnet loader called Aeternum C2 uses the public Polygon blockchain for its command-and-control infrastructure, making it highly resistant to takedown.The malware, written...