Ionut Arghire

Fake CAPTCHA pages instruct victims to paste malicious commands in the Windows Terminal instead of the Run dialog.

Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare.

Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.

The malware targets browser and cryptocurrency wallet data, along with system information and user files.

The company will accelerate platform development, expand go-to-market efforts, and invest in product innovation.

The nation-state-grade iOS exploit kit targets 23 vulnerabilities affecting iOS 13 to 17.2.1.

The attacks, observed since February, show that Iranian hackers already have a presence in the networks of US organizations.

The company will expand its engineering team, deepen integrations, and accelerate go-to-market initiatives.

Cisco has rolled out patches for 48 vulnerabilities in Firewall ASA, Secure FMC, and Secure FTD products.

The startup aims to provide organizations with visibility into how AI operates across their environment.

Starting September 2026, new Chrome iterations will be released twice as fast, part of a two-week cycle.

The principles cover security, resilience against attacks and disasters, AI, and openness and interoperability.

A patch bypass for an authenticated code execution bug, the flaw leads to zero-click remote code execution attacks.

Hackers stole names, Social Security numbers, driver’s license information, voter registration records, and health-related information.

An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption.

Improper input sanitization in the framework can be exploited through the Shell tool, allowing attackers to modify system files and steal data.

Using low-cost receivers deployed along roads, academic researchers tracked drivers and their movement patterns.

Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files.

Malicious websites could open a WebSocket connection to localhost on the OpenClaw gateway port, brute force passwords, and take control of the agent.

Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors.