Cybercriminals leaked over 1 million customer records from Dutch telco Odido after extortion failed. ShinyHunters claimed the attack. They dumped data in two waves on…
Legacy Google API keys in public web code now access sensitive Gemini AI endpoints without warning. These keys, meant for Maps or Firebase, gain power…
A phishing campaign delivers Agent Tesla malware via emails with business lures. It uses process hollowing and anti-analysis tricks to evade detection on Windows systems.…
A fake Zoom update scam infected 1,437 Windows users worldwide in just 12 days. Attackers used a rogue version of Teramind, a real employee monitoring…
1Campaign lets attackers run malicious Google Ads that pass review. The cloaking tool shows clean pages to Google’s scanners but redirects real users to phishing…
ResidentBat Android malware requires physical device access for installation. Belarusian KGB operators sideload it via ADB, grant permissions manually, and disable Play Protect. Targets include…
DarkCloud infostealer sells for $30 on Telegram and clearnet stores. It grabs credentials from browsers, email clients, VPNs, and more. Enterprises face network access sales…
SeaFlower campaign delivers trojanized versions of Coinbase Wallet, MetaMask, TokenPocket, and imToken. These pixel-perfect clones steal seed phrases from iOS and Android users. Chinese search…
Wireshark 4.6.4 fixes three security vulnerabilities that could crash the network analyzer. Malformed packets in USB HID, NTS-KE, and RF4CE dissectors triggered memory exhaustion or…
ServiceNow fixed CVE-2026-0542, a critical remote code execution flaw in its AI Platform sandbox. Attackers could run malicious code without authentication over HTTPS. The company…
November 21, 2025
1 comment 
