Several popular Android mental health apps, available on Google Play, are grappling with significant security vulnerabilities. These apps, collectively boasting 14.7 million downloads, may inadvertently expose users’ sensitive medical information. Experts raise concerns that flaws in the apps’ code could potentially lead to unauthorized access to users’ data. The revelations underscore ongoing issues in the […]
In a recently identified campaign, the Russia-linked threat actor known as APT28 has deployed MacroMaze malware to compromise entities across Western and Central Europe. The campaign, which took place from September 2025 to January 2026, was reported by the S2 Grupo’s LAB52 threat intelligence team. They revealed that Operation MacroMaze targets entities using webhook-based macro […]
GrayCharlie deploys NetSupport and other malicious software by injecting JavaScript into compromised WordPress sites. Since mid-2023, this threat actor has covertly embedded harmful scripts to facilitate malware delivery. Known for connections to the SmartApeSG cluster, GrayCharlie utilizes NetSupport RAT to gain control over infected systems and has expanded its arsenal to include Stealc and SectopRAT. […]
Google Chrome pushes a fix in an emergency security update, addressing three high-severity vulnerabilities in the browser. The update targets versions 145.0.7632.116/117 for Windows and macOS, while Linux users receive version 144.0.7559.116. Significant risks are mitigated as the update tackles flaws involving out-of-bounds memory access and inappropriate implementation. The first vulnerability, CVE-2026-3061, presents an out-of-bounds […]
In February 2026, hackers use Claude and DeepSeek in a sophisticated wave of cyberattacks targeting FortiGate devices worldwide. These advanced AI-powered strategies integrate Large Language Models to automate complex tasks within the intrusion chain. Misconfigured servers revealed that attackers embedded Claude and DeepSeek into their operations, focusing on FortiGate SSL VPN appliances. By exploiting stolen […]
WhatsApp bolsters login security with its latest Android beta update, introducing an optional account password feature. This enhancement aims to add an additional security layer to the existing two-step verification system, thwarting unauthorized access attempts. WhatsApp users can set an alphanumeric password, ranging from 6 to 20 characters, to further protect their accounts. Combined with […]
CrowdStrike says attackers move through networks with alarming speed, taking just 29 minutes on average to go from infiltration to internal movement in 2025. This marks a striking 65% increase in velocity compared to the previous year, highlighting an escalating threat landscape for businesses. Cybersecurity experts attribute this swift progression to increasingly sophisticated attack methods. […]
A Romanian hacker pleaded guilty in a U.S. court to charges of selling access to the network of an Oregon state government office. Catalin Dragomir admitted his role in the cybercrime, which involved unauthorized intrusion into the state’s systems. Dragomir sold access to these networks, posing a significant threat to the security of sensitive state […]
Romania says ransomware advances Moscow’s geopolitical interests by targeting the nation’s critical infrastructure. According to the country’s top cybersecurity official, these recent ransomware attacks are likely part of a wider Russian hybrid operation designed to destabilize Romanian society. This threat underscores the increasing sophistication of cybercriminals operating in alignment with state-backed objectives. Romanian authorities are […]
Cybersecurity experts face mounting challenges as threat actors exploit a critical vulnerability known as CVE-2026-1731 in BeyondTrust’s Remote Support (RS) and Privileged Remote Access (PRA) products. This vulnerability, with a near-maximum CVSS score of 9.9, enables attackers to run operating system commands remotely, potentially leading to full system compromise. BeyondTrust has responded by releasing crucial […]
Cybercriminals continue to devise sophisticated methods to compromise systems, with an alarming new tactic emerging whereby an Excel exploit lets hackers infiltrate personal computers. This technique involves embedding the XWorm 7.2 malware within JPEG image files. Hackers leverage this exploit to facilitate covert entry into target systems, manipulating vulnerabilities in Excel files to deliver their […]
Spain detains suspected Anonymous members accused of orchestrating cyberattacks against public institutions following a devastating flood in 2024. Authorities allege that four individuals linked to the hacking collective carried out a series of Distributed Denial-of-Service (DDoS) attacks. These actions targeted government entities they blamed for the tragic events associated with the natural disaster. Investigators assert […]