3+ day, 3+ hour ago   (460+ words) Multiple state-aligned hacking groups have adopted a new exploit kit that can compromise Google Chrome users even when they run the latest stable browser version available at the time of the attack. The campaign, independently documented by Proofpoint and Volexity,…...

4+ day, 6+ hour ago   (496+ words) Google has released Chrome 153 to the stable channel with fixes for 230 security vulnerabilities, including a V8 memory corruption flaw that Google says is already being exploited in attacks. The actively exploited vulnerability is tracked as CVE-2026-87491 and is described as an…...

5+ day, 2+ hour ago   (244+ words) Cybercriminals and state-backed hackers are moving beyond using AI as a coding or research assistant and are instead building agentic systems that can autonomously scan targets, troubleshoot failures, and harvest credentials. Google Threat Intelligence Group (GTIG) says one financially motivated…...

4+ day, 22+ hour ago   (439+ words) A zero-click worm can spread between iPhones and Android devices through WeChat calls, allowing attackers to hijack accounts even without victims answering. Dubbed WeWorm, the proof-of-concept attack exploits a memory corruption vulnerability in WeChat’s Voice-over-IP (VoIP) stack. Calif reported the…...

6+ day, 28+ min ago   (499+ words) The Gamers Nexus investigation also found extensive advertising and viewing telemetry tied to LG’s automatic content recognition (ACR) systems. Separately, security researchers demonstrated vulnerabilities that could allow compromised TVs to be abused as listening devices. For the investigation, Gamers Nexus…...

6+ day, 6+ hour ago   (423+ words) CERT Polska is warning MikroTik customers to urgently update RouterOS after confirming that attackers are exploiting two critical SSH vulnerabilities to gain full administrative access to internet-exposed devices. The Polish national cybersecurity team disclosed six RouterOS vulnerabilities on September 5, including…...

1+ week, 4+ day ago   (453+ words) The FBI is investigating an apparent breach involving identity verification provider IDScan after a dark web service began selling access to more than 153 million US and Canadian driver’s license scans, according to an exclusive KrebsOnSecurity report. The marketplace, called Nexus,…...

1+ week, 4+ day ago   (482+ words) Socket’s Threat Research Team uncovered the packages on Packagist, where they were disguised as themes for OphimCMS and KKPhim, two Laravel-based content management systems used by Vietnamese movie and comic streaming websites. The malicious themes were published across five Packagist…...

2+ week, 1+ day ago   (459+ words) The ShinyHunters threat group claims it compromised McKesson and obtained data on over 284 million patient records, including highly sensitive medical, identity, prescription, and healthcare provider information. CyberInsider reviewed samples privately provided by the threat actor that appear consistent with the…...