Latest

Google has removed 224 malicious apps linked to the SlopAds ad fraud scheme, which had been generating an estimated 2.3 billion ad requests per day. Discovery and Scale The campaign was uncovered by the Satori Threat Intelligence team at Human Security, which found that the apps had been downloaded

Microsoft and Cloudflare have shut down a Phishing-as-a-Service (PhaaS) operation known as RaccoonO365, which had been used to steal thousands of Microsoft 365 credentials worldwide. How RaccoonO365 Worked The service enabled its subscribers to build phishing campaigns with emails, malicious attachments, QR code lures, and phishing websites specifically crafted to

Analysts at F6 have analyzed phishing attacks carried out by a new hacker group known as ComicForm, which has targeted Russian companies in finance, tourism, biotechnology, research, and trade sectors, as well as organizations in Belarus and Kazakhstan. In their emails, attackers distributed the FormBook stealer—sometimes alongside animated GIFs

Researchers have developed a new Rowhammer variant — Phoenix — that can defeat recent protection mechanisms in SK Hynix DDR5 chips and escalate to root on vulnerable systems in under two minutes. Rowhammer, first demonstrated by researchers at Carnegie Mellon University in 2014, exploits the physical layout of DRAM. Repeated, rapid access

Researchers have uncovered the compromise of more than 180 npm packages infected with self-propagating malware designed to spread to other packages. The campaign has been named Shai-Hulud, likely after the @ctrl/tinycolor package compromise—an npm package downloaded over 2 million times per week. The name comes from the shai-hulud.

Samsung has patched a zero-day remote code execution (RCE) vulnerability that was already being exploited in attacks against Android users. The flaw, tracked as CVE-2025-21043 with a CVSS score of 8.8, affects Samsung devices running Android 13 and newer. The issue was first disclosed on August 13, 2025, by

The U.S. Department of Justice (DOJ) announced that Steven Hale, a former employee of an unnamed international company, has been sentenced to nearly four years in prison for stealing hundreds of DVDs and Blu-rays containing unreleased films and distributing them online. Theft and Distribution In May 2025, Hale pleaded