Latest

Analysts from AquaSec have identified a novel strain of Linux malware named Koske, which conceals its payload inside JPEG images of pandas. Believed to be developed using artificial intelligence (AI), Koske is designed to infiltrate Linux systems by embedding malicious code directly into memory via deceptive image files. Adaptive Behavior

This marks the third malware-laced game to appear on Steam in just six months. A hacker group operating under the alias EncryptHub, also known as Larva-208, has embedded malicious software into a Steam-distributed game—turning a survival crafting title into a silent delivery mechanism for spyware. The Target: Chemia by

A new variant of the Coyote banking Trojan is actively exploiting Windows accessibility features—specifically, the Microsoft UI Automation (UIA) framework—to detect when users visit banking or cryptocurrency exchange websites and steal their login credentials. How Microsoft UI Automation Is Being Abused Microsoft UIA is an accessibility framework designed

The alleged administrator of the Russian-language cybercrime forum XSS[.]is has been arrested by Ukrainian authorities at the request of the Paris Prosecutor’s Office. The arrest was followed by a law enforcement takedown of the website, confirming what many in the cybercrime community had feared: the forum had been

A hacker infiltrated Amazon's AI assistant, Q, embedding instructions that would wipe user data from local machines and cloud environments. Even more concerning: Amazon unknowingly shipped the compromised version in a public release. What Is Amazon Q? Amazon Q is an AI-powered coding assistant for developers and IT

Brave Software has announced that its browser now blocks Microsoft’s Windows Recall feature by default—preventing the operating system from capturing screenshots of Brave windows and reinforcing its core mission of user privacy. What Is Windows Recall? First introduced by Microsoft in May 2024, Recall is an AI-powered feature

Multiple Chinese state-backed hacking groups are actively exploiting a chain of zero-day vulnerabilities in Microsoft SharePoint, according to cybersecurity researchers. Alarmingly, the attackers have reportedly compromised the network of the U.S. National Nuclear Security Administration (NNSA). ToolShell Exploit Chain: From Pwn2Own to Real-World Attacks The exploit chain—dubbed ToolShell—