Ionut Arghire

Threat actors are reusing Tycoon 2FA tools across other phishing kits following the platform’s disruption.

Kejia Wang and Zhenxing Wang compromised the identities of dozens of US persons to help land jobs at over 100 companies.

An indirect prompt injection could be chained with a sandbox bypass and Cursor’s remote tunnel feature for shell access to machines.

Authorities in 21 countries participated in a coordinated action against DDoS-for-hire services.

The startup is leveraging AI to prevent AI-powered attacks across applications, users, machines, and cloud workloads.

The flaw allows low-privileged users to upload files to a temporary directory to achieve remote code execution.

To optimize management of CVE volume, entries that do not meet specific criteria will not be automatically enriched.

The flaws can be exploited remotely to impersonate users or execute arbitrary commands on the underlying OS.

The automotive analysis and data company is working with external experts to investigate the attack.

The Israeli startup aims to secure AI agents at runtime, continuously monitoring their behavior to prevent unsafe actions.

Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure.

Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes.

The flaws could allow a remote attacker to maintain access after their account has been disabled and to access information from other user sessions.

The flaws could allow attackers to bypass authentication or execute arbitrary code or commands via HTTP requests.

The company has released 19 new security notes addressing flaws in over a dozen enterprise products.

The sprawling cybercrime operation abuses major providers to prevent takedowns and distance itself from sanctions.

The parser is meant to mitigate the entire class of memory safety bugs in the low-level environment.

The security defects allow attackers to escalate privileges and execute arbitrary code remotely.

The malware mimics the legitimate Anthropic installation, relies on DLL sideloading, and cleans up after itself.

The feature allows enterprise users to compose and read end-to-end encrypted messages natively on their mobile devices.