A new phishing campaign is using the names ChatGPT and Gemini to trick iPhone users into installing fake apps from Apple’s App Store, then handing…
A critical vulnerability in the User Registration & Membership plugin for WordPress can let attackers create administrator accounts without authentication. The bug, tracked as CVE-2026-1492,…
A newly advertised Android malware service called Mirax Bot is making the rounds on cybercrime forums, with seller claims that it supports Hidden Virtual Network…
Amazon has disclosed three security flaws in AWS-LC, its open-source cryptographic library, including two bugs that can let unauthenticated attackers bypass parts of PKCS7 verification.…
The FBI says a U.S. government contractor accused of stealing more than $46 million in cryptocurrency from the U.S. Marshals Service has been arrested in…
Apache ActiveMQ has patched a vulnerability in its MQTT transport that can let an authenticated attacker send malformed packets and trigger unexpected broker behavior. The…
OpenAnt is a new open-source vulnerability discovery tool that uses large language models to find and verify security flaws in code. Knostic says the project…
A Ghanaian national has pleaded guilty in New York to helping run a fraud operation that U.S. prosecutors say stole more than $100 million from…
Microsoft is expanding Microsoft 365 Backup with a granular restore feature that lets admins recover individual files and folders from existing backup restore points. That…
The FBI says it is investigating a breach involving internal systems tied to surveillance and wiretap operations. The bureau confirmed that it identified and addressed…
November 21, 2025
1 comment 
