Ionut Arghire

Newly discovered spyware has sneaked into Apple’s App Store and Google Play to steal images from users’ mobile devices.

North Korean hackers employ social engineering to trick Zoom Meeting participants into executing system-takeover commands.

A critical-severity vulnerability in Teleport could allow remote attackers to bypass SSH authentication and access managed systems.

The personal information of 743,000 individuals was compromised in a 2024 ransomware attack on McLaren Health Care.

The Godfather Android trojan uses on-device virtualization to hijack legitimate applications and steal users’ funds.

Threat actors are exploiting a critical-severity vulnerability in Motors theme for WordPress to change arbitrary user passwords.

A threat actor is abusing Cloudflare Tunnels for the delivery of a Python loader as part of a complex infection chain.

Personal data of former and current council workers, including election staff, may have been accessed by hackers.

Trend Micro and ReversingLabs uncovered over 100 GitHub accounts distributing malware embedded in open source hacking tools.

A ransomware group has claimed the theft of millions of files from procurement service provider Chain IQ and 19 other companies.

Cisco has resolved a high-severity vulnerability in Meraki MX and Meraki Z devices. Atlassian pushed patches for multiple third-party dependencies.

Misconfigured permissions in Google’s Gerrit code collaboration platform could have led to the compromise of ChromiumOS and other Google projects.

Citrix has released patches for critical- and high-severity vulnerabilities in NetScaler and Secure Access Client and Workspace for Windows.

Google has released a Chrome 137 update to resolve two memory bugs in the browser’s V8 and Profiler components.

Veeam and BeyondTrust have resolved several vulnerabilities that could be exploited for remote code execution.

GreyNoise warns of a spike in exploitation attempts targeting a two-year-old vulnerability in Zyxel firewalls.

Cloud security startup Circumvent has raised $6 million to develop a network of agents for autonomous prioritization and remediation.

CISA warns that a vulnerability impacting multiple discontinued TP-Link router models is exploited in the wild.

A high-severity authorization bypass vulnerability in Asus Armoury Crate provides attackers with low-level system privileges.

Asheville Eye Associates says the personal information of 147,000 individuals was stolen in a November 2024 data breach.