The Exploit Post

Sign in Subscribe

News

News

Memento Labs Chief Confirms Company's Spyware Found in Russian Cyberattack

Memento Labs Chief Confirms Company's Spyware Found in Russian Cyberattack

Paolo Lezzi, who leads the Italian surveillance company Memento Labs (formerly Hacking Team), has confirmed to media outlets that researchers from Kaspersky Lab correctly identified his company's spyware in recent attacks. The malware, called Dante, appeared in a sophisticated campaign targeting Russian organizations. Lezzi's response included

Leaked Documents Show Which Pixel Phones Cellebrite Can Access

Leaked Documents Show Which Pixel Phones Cellebrite Can Access

An insider operating under the name "rogueFed" has leaked screenshots from a confidential Cellebrite briefing intended for law enforcement agencies. These documents reveal which Google Pixel smartphone models can be compromised using the company's forensic tools. The leak also shows that GrapheneOS, a privacy-focused custom operating

Zimperium Identifies Over 760 Active NFC Malware Apps Targeting Eastern Europe

Zimperium Identifies Over 760 Active NFC Malware Apps Targeting Eastern Europe

Zimperium researchers are warning about a surge in NFC-based malware targeting Android users across Eastern Europe. In recent months, the security firm identified more than 760 malicious applications that exploit NFC technology to steal payment data from victims. This represents a sharp increase from the isolated samples discovered when these

DeliveryRAT Android Trojan Now Launches DDoS Attacks

DeliveryRAT Android Trojan Now Launches DDoS Attacks

Security researchers at F6 have analyzed an updated version of DeliveryRAT, an Android Trojan that continues to expand its capabilities. This malware disguises itself as legitimate applications—food delivery services, online marketplaces, banking apps, and package tracking tools. The latest version, which appeared in the second half of 2025, added

TEE.fail Attack Breaks Through Intel and AMD Confidential Computing Protections

TEE.fail Attack Breaks Through Intel and AMD Confidential Computing Protections

Researchers have successfully demonstrated a new attack method called TEE.fail. This technique extracts cryptographic keys and sensitive data from secure enclaves built into Intel processors (SGX, TDX) and AMD processors (SEV-SNP). These secure zones, known as Trusted Execution Environments (TEE), separate themselves from the operating system. Manufacturers built them

Brash Vulnerability Can Crash Chromium Browsers in Seconds

Brash Vulnerability Can Crash Chromium Browsers in Seconds

I'll analyze your article as both an editor and cybersecurity journalist, then provide a rewritten version. Editorial Assessment: Grammar: Strong overall, with minor issues: * "Information security researcher" could be simply "Security researcher" * "The core of the problem is that" – slightly wordy * "

Russian Police Arrest Creators of Meduza Stealer Malware

Russian Police Arrest Creators of Meduza Stealer Malware

Russian law enforcement has arrested members of a cybercrime group responsible for creating and operating the Meduza stealer, a malware-as-a-service operation that targeted credentials and cryptocurrency wallets for nearly two years. The Department for Countering Cybercrime of the Russian Ministry of Internal Affairs, working with Astrakhan region law enforcement, detained