Latest

The British National Crime Agency (NCA) has arrested a suspect linked to a ransomware attack that disrupted operations at several European airports earlier this week. Late last week, hackers targeted Collins Aerospace, the American company behind the ARINC SelfServ vMUSE system—self-service kiosks used by passengers to check in, drop

The developers of Kali Linux have announced version 2025.3, the third release of the year. The update introduces ten new tools, Nexmon support, and multiple NetHunter enhancements. Nexmon Support Returns Nexmon is a framework for patching the firmware of Broadcom and Cypress Wi-Fi chips, enabling monitor mode and frame

Valve is warning users who installed and ran the malicious Steam game BlockBlasters to take immediate action. Affected players are advised to scan their systems with antivirus tools and, in severe cases, consider a full operating system reinstallation. How the Attack Came to Light The malicious game drew attention earlier

Security specialists at Rapid7 have discovered a serious flaw in multiple versions of OxygenOS, the Android-based operating system used in OnePlus devices. The vulnerability allows any installed application to access SMS data and metadata—without permissions or user interaction. Discovery and Disclosure The issue, tracked as CVE-2025-10184, remains unpatched. Rapid7

Researchers have uncovered a malicious npm package named fezbox that steals victims’ cookies by downloading an obfuscated payload hidden inside a dense QR code. Specialists at Socket say the attackers used QR codes as a covert delivery channel. The package contains instructions to fetch a JPG that holds a high-density

GitHub has announced a new set of protective measures designed to counter supply chain attacks—an escalating problem that has led to several major incidents on the platform in recent months. A String of High-Profile Attacks Several large-scale compromises have highlighted the risks facing GitHub and npm: * August: the “s1ngularity”

Specialists from Adversa have published an analysis of the top 25 vulnerabilities of the Model Context Protocol (MCP). The researchers describe this work as “the most comprehensive analysis of MCP vulnerabilities to date.” What MCP Is—and Why It Matters The Model Context Protocol (MCP), developed by Anthropic and released