Signal has confirmed that a wave of targeted phishing campaigns has led to account takeovers affecting some high-profile users, including journalists and government officials. The…
A Vietnam-linked cybercrime ecosystem has been tied to large-scale fake account registration campaigns targeting online platforms and service providers worldwide. Okta Threat Intelligence says a…
A critical vulnerability in ExifTool, a widely used open-source metadata utility, could allow attackers to execute malicious commands on macOS systems using specially crafted image…
Microsoft has launched Copilot Cowork, a new Microsoft 365 Copilot feature that turns natural-language requests into multi-step task execution across Microsoft 365 apps. Instead of…
A newly released red team toolkit called M365Pwned shows how dangerous Microsoft 365 app permissions can become after an attacker gains access to a tenant’s…
A newly discovered Linux malware called ClipXDaemon is targeting cryptocurrency users by silently hijacking clipboard data in X11 desktop environments. Security researchers say the malware…
A critical vulnerability in Nginx UI could allow attackers to download and decrypt full server backups without authentication. The flaw, tracked as CVE-2026-27944, carries a…
Transparent Tribe, also tracked as APT36, appears to have moved from relying mainly on familiar off-the-shelf malware to a faster, AI-assisted model that Bitdefender calls…
A newly disclosed ExifTool vulnerability can let a malicious image trigger command execution on macOS during metadata processing. The flaw affects ExifTool 13.49 and earlier…
A critical vulnerability affecting multiple Hikvision surveillance products is drawing fresh security attention after it was added to the U.S. government’s Known Exploited Vulnerabilities (KEV)…
November 21, 2025
1 comment 
