The Exploit Post

Sign in Subscribe

Red Dog Security

DDoS Attack on Arch Linux Disrupts Project’s Website, Repository, and Forums

DDoS Attack on Arch Linux Disrupts Project’s Website, Repository, and Forums

The Arch Linux team reports that it has been battling a sustained DDoS attack for more than a week, severely disrupting access to several of the project’s key resources. The attack, which began on August 16, has intermittently affected the Arch User Repository (AUR), the official website, the Wiki,

Researchers Hid Malicious AI Prompts in Tiny Images

Researchers Hid Malicious AI Prompts in Tiny Images

Security researchers at Trail of Bits have demonstrated a new type of attack that embeds malicious prompts into images, invisible to the human eye but capable of stealing user data when processed by AI systems. How the Attack Works The technique relies on high-resolution images with hidden prompts that only

Android to Ban Installation of Apps from Unverified Developers

Android to Ban Installation of Apps from Unverified Developers

Google has announced a major policy shift: beginning in 2026, only applications from verified developers will be installable on certified Android devices. The move is aimed at curbing malware distribution and financial fraud, and it will apply to apps installed from third-party sources as well as through sideloading. Scope of

Critical Vulnerability in Docker Desktop Allowed Host Compromise

Critical Vulnerability in Docker Desktop Allowed Host Compromise

A critical vulnerability in Docker Desktop for Windows and macOS made it possible to compromise the host system by running a malicious container—even when Enhanced Container Isolation (ECI) protection was enabled. The flaw, tracked as CVE-2025-9074 with a CVSS score of 9.3, is classified as a server-side request

Malware Downloaded Over 19 Million Times Removed from Google Play Store

Malware Downloaded Over 19 Million Times Removed from Google Play Store

Security researchers have uncovered a massive malware campaign on the Google Play Store, where 77 malicious Android applications—collectively downloaded more than 19 million times—were distributing multiple malware families. According to specialists at Zscaler, the surge included adware apps as well as more dangerous threats such as Joker, Harly,

Developer Sentenced to 4 Years in Prison for Creating “Kill Switch” in Former Employer’s Systems

Developer Sentenced to 4 Years in Prison for Creating “Kill Switch” in Former Employer’s Systems

A former software developer has been sentenced to four years in prison for sabotaging his ex-employer’s Windows network with custom malware and a “kill switch” that locked out thousands of employees worldwide. According to the U.S. Department of Justice, 55-year-old Davis Lu, a Chinese citizen legally residing in

Positive Technologies Analyzes the Toolset of APT Group Goffee

Positive Technologies Analyzes the Toolset of APT Group Goffee

Specialists at Positive Technologies have revealed details of a previously undocumented toolset used by the hacker group Goffee (also known as Paper Werewolf). According to the researchers, these tools were deployed in the later stages of attacks, enabling the group to maintain long-term persistence inside victim networks while avoiding detection.