Apple on Monday released backported security updates to address a recently discovered flaw that has been actively exploited in the wild. The vulnerability, CVE-2025-43300 (CVSS score: 8.8), is an out-of-bounds write issue in the ImageIO component. If...
Cybersecurity experts have uncovered a new campaign leveraging a variant of the FileFix social engineering tactic to deliver the StealC information-stealer malware. Acronis security researcher Eliad Kimhy explained, "The campaign uses highly convinci...
Cybersecurity researchers have uncovered a massive ad fraud operation dubbed SlopAds, which ran a cluster of 224 Android apps and racked up 38 million downloads across 228 countries and territories. According to HUMAN’s Satori Threat Intelligence and...
Cybersecurity researchers have disclosed several critical vulnerabilities in Chaos Mesh, an open-source cloud-native Chaos Engineering platform, that could allow attackers to take over Kubernetes clusters. According to JFrog, an attacker with minimal...
Microsoft’s Digital Crimes Unit (DCU) announced a coordinated effort with Cloudflare to seize 338 domains tied to RaccoonO365, a financially motivated threat group behind a phishing-as-a-service (PhaaS) toolkit. The tool had stolen over 5,000 Microso...
The U.S. Department of Justice (DoJ) on Tuesday resentenced Conor Brian Fitzpatrick, former administrator of BreachForums, to three years in prison for his role in running the cybercrime forum and possessing child sexual abuse material (CSAM). Fitzpa...
