A newly uncovered malvertising campaign shows how Google Ads pushed TamperedChef malware through deceptive PDF editing tools disguised as legitimate software. The campaign began in June 2025 when threat actors registered fake websites and lured users searching for appliance manuals and document tools. Victims downloaded a trojanized program, AppSuite PDF Editor, which silently deployed a […]
Security researchers have uncovered a critical Bluetooth vulnerability known as the WhisperPair flaw, which exposes millions of wireless earbuds, headphones, and speakers to remote hijacking and tracking. The issue stems from a misimplementation of Google’s Fast Pair protocol, affecting devices from major brands including Sony, Anker, JBL, and Xiaomi. Researchers from KU Leuven found that […]
A critical Aveva flaw uncovered in the Process Optimization software, previously known as ROMeo, exposes industrial systems to unauthenticated remote code execution under system privileges. Disclosed on Jan. 13, 2026, the flaw is part of seven newly reported vulnerabilities affecting version 2024.1 and earlier. The most severe issue lies in a code injection vulnerability within […]
Threat actors are increasingly deploying a stealthy new tool, as the PDFSIDER backdoor evades antivirus and EDR systems by blending with trustworthy software and encrypting its communication. Security researchers at Resecurity discovered the malware during an attempted breach of a Fortune 100 enterprise, where attackers failed to cause data loss. PDFSIDER leverages a spear-phishing campaign […]
A malicious browser add-on known as the CrashFix Chrome extension is at the center of a newly discovered cyber campaign that tricks users into running harmful commands. Cybersecurity researchers have attributed the ongoing activity, labeled KongTuke, to attackers distributing the extension under the guise of an ad blocker. Once installed, it deliberately crashes the Chrome […]
Microsoft confirms a Windows shutdown issue affecting some devices running Windows 11 version 23H2 after the latest January update. According to the company, systems with System Guard Secure Launch enabled may fail to power down completely. The problem prevents affected PCs from shutting down or entering hibernation, potentially disrupting performance and battery life. The issue […]
A newly discovered Redmi Buds flaw exposes users to serious security risks, including data leakage and forced firmware crashes. Security researchers found two vulnerabilities in Xiaomi’s popular wireless earbuds, from the Redmi Buds 3 Pro to the 6 Pro models. The flaws stem from the way the earbuds manage Bluetooth’s RFCOMM protocol, allowing nearby attackers […]
A newly identified cyber campaign known as UAT-8837 targets North American critical infrastructure, deploying open-source tools alongside what appear to be zero-day exploits. Analysts believe the group may be linked to China, although attribution remains tentative. The attackers have demonstrated advanced capabilities, exploiting previously unknown vulnerabilities to bypass established defenses. Two CVEs are under investigation […]
Google will pay $8.25 million to settle a class-action lawsuit that accuses the tech giant of unlawfully collecting data from devices used by children under 13 years of age. The complaint alleges that the company and its platforms, including YouTube, gathered personal data without proper parental consent, violating federal and state privacy laws designed to […]
Global ransomware attacks surged 32% in 2025, driven by a sharp increase in incidents targeting manufacturers, according to a new report from Comparitech. The data highlights a growing cybersecurity threat facing the industrial sector, as attackers shift focus from traditional targets to high-value production operations. Manufacturers experienced the brunt of these attacks, signaling a troubling […]
Germany seeks an Israeli-style shield as it partners with Jerusalem to bolster cyber defenses amid escalating digital threats. On Tuesday, the two nations signed a cyber and security cooperation agreement in hopes of replicating Israel’s “cyber dome” model. The accord marks a significant step for Berlin as it attempts to strengthen its resilience against growing […]
Cisco on Thursday pushed security updates to fix a critical vulnerability in its Secure Email Gateway product, after Chinese state-linked hackers exploited the flaw in the wild. The zero-day, tracked as CVE-2025-20393 and carrying a maximum severity rating, affects Cisco AsyncOS Software and allows remote code execution. Cybersecurity researchers said the threat actor triggered the […]