Ionut Arghire

Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure.

Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes.

The flaws could allow a remote attacker to maintain access after their account has been disabled and to access information from other user sessions.

The flaws could allow attackers to bypass authentication or execute arbitrary code or commands via HTTP requests.

The company has released 19 new security notes addressing flaws in over a dozen enterprise products.

The sprawling cybercrime operation abuses major providers to prevent takedowns and distance itself from sanctions.

The parser is meant to mitigate the entire class of memory safety bugs in the low-level environment.

The security defects allow attackers to escalate privileges and execute arbitrary code remotely.

The malware mimics the legitimate Anthropic installation, relies on DLL sideloading, and cleans up after itself.

The feature allows enterprise users to compose and read end-to-end encrypted messages natively on their mobile devices.

A critical-severity flaw could be exploited remotely, without authentication, to take over a vulnerable device.

Attackers could exploit these vulnerabilities in denial-of-service, information disclosure, and arbitrary code execution attacks.

The document provides a behavior-based model of the tactics and techniques employed by fraudsters.

Within nine hours, a hacker built an exploit from the unauthenticated bug’s advisory and started using it in the wild.

New Device Bound Session Credentials render stolen session cookies unusable by cryptographically binding authentication.

Dozens of such keys can be extracted from apps’ decompiled code to gain access to all Gemini endpoints.

The bugs could allow attackers to modify protected resources and escalate their privileges to administrator.

Tracked as UNC6783, the threat actor is likely linked to Mr. Raccoon, the hacker behind the alleged theft of Adobe data from a BPO.

In December 2025, hackers stole names and passport numbers from the European travel company’s network.

The vulnerability requires authentication for successful exploitation, but another flaw exposes the Jolokia API without authentication.