The Exploit Post

Sign in Subscribe

Red Dog Security

iCloud Calendar Is Being Exploited to Send Phishing Emails from Apple’s Servers

iCloud Calendar Is Being Exploited to Send Phishing Emails from Apple’s Servers

Invitations sent through iCloud Calendar are being weaponized to deliver phishing emails disguised as purchase notifications—sent directly from Apple’s own mail servers. This tactic significantly increases the chances of bypassing spam filters. A Familiar Scam with a New Twist According to Bleeping Computer, a reader recently shared a

Hacked npm Packages Downloaded More Than 2.6 Billion Times Weekly

Hacked npm Packages Downloaded More Than 2.6 Billion Times Weekly

Researchers are warning of what may be the largest supply chain attack in history. Attackers injected malware into several of the most widely used npm packages—collectively downloaded more than 2.6 billion times each week. The breach was made possible when hackers compromised a maintainer’s account through a

Google May Make AI Mode in Search Available by Default

Google May Make AI Mode in Search Available by Default

Google is preparing to give users more control over its AI-powered search experience by allowing “AI mode” to be set as the default—potentially replacing traditional link-based results. What AI Mode Does AI mode is a version of Google Search that uses large language models (LLMs) to generate summaries of

Unpatched Vulnerability Found in TP-Link Routers

Unpatched Vulnerability Found in TP-Link Routers

TP-Link has confirmed a previously unknown zero-day vulnerability affecting several of its router models. The company said it is investigating the issue and preparing security updates. Discovery and Technical Details The flaw was discovered by an independent researcher using the alias ByteRay, who first reported it to TP-Link on May

AI Ransomware PromptLock Turns Out to Be a Research Project

AI Ransomware PromptLock Turns Out to Be a Research Project

What first appeared to be the world’s first case of AI-powered ransomware has turned out to be something else entirely: a university research project. From Discovery to Revelation Last month, security experts at ESET reported finding samples of malware called PromptLock on VirusTotal. They described it as the first

Law Enforcement Shuts Down Pirate Streaming Network Streameast

Law Enforcement Shuts Down Pirate Streaming Network Streameast

Egyptian authorities, working with the Alliance for Creativity and Entertainment (ACE), announced they have dismantled Streameast—described as the world’s largest illegal sports streaming network. Two alleged operators have been arrested. A Giant in Pirate Streaming Founded in 2018, Streameast offered free, ad-supported access to HD content from licensed

Apple Invites Researchers to Test iPhone Security

Apple Invites Researchers to Test iPhone Security

Apple has opened applications for its 2026 Security Research Device Program (SRDP), giving white-hat experts the chance to receive a specially configured iPhone for cybersecurity research. Applications are open until October 31, 2025. What the Program Offers Launched in 2020, SRDP provides researchers with “hackable” iPhones designed to make iOS