SecurityWeek (1 hour ago)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
Read the full story on SecurityWeek.
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week’s security stories. The rest gets interesting in different ways. A small permission can lead to a big theft.
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims’ internet connections through a commercial residential proxy network.
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument.
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.
Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.
Hugging Face Blog
72 active sources
27 Turkish · 45 English
All sources
