A newly discovered cybercrime tool known as the “Stanley” toolkit fakes Chrome browser URLs and is being sold for $6,000 on Russian-speaking hacking forums. Researchers say the toolkit disguises phishing domains by manipulating how URLs appear in Google Chrome, making it difficult for users to detect fraudulent sites. The “Stanley” toolkit operates by exploiting Chrome’s […]
A newly disclosed server-side instagram flaw gave attackers the ability to access private posts and captions without authentication, security researcher Jatin Banga revealed this week. The issue exploited Instagram’s mobile web infrastructure using manipulated HTTP headers and bypassed standard privacy safeguards. By crafting a GET request with mobile user-agent headers, attackers triggered a JSON response […]
A recent phishing campaign, active from November 2025 to January 2026, has seen Vercel hosting abused to distribute a remote access tool under the guise of legitimate online services. Threat actors behind the operation crafted emails with financial lures like overdue invoices and shipping documents, prompting users to click embedded links. These links led to […]
ESET ties a DynoWiper attack on Poland’s power grid in December 2025 to Sandworm, a Russia-aligned advanced persistent threat group. Security researchers at the cybersecurity firm said the destructive malware targeted critical infrastructure, disrupting power systems in the region. ESET linked the activity to Sandworm based on malware forensics and operational tactics resembling past campaigns […]
MITRE unveils a new cybersecurity framework aimed at safeguarding embedded systems powering U.S. critical infrastructure and defense technology. Developed with the Air Force’s Cyber Resiliency Office for Weapon Systems, the Embedded Systems Threat Matrix (ESTM) bridges a gap in protecting mission-critical platforms from sophisticated cyber threats. ESTM equips researchers, vendors, and security professionals with actionable […]