ARS Technica
Notepad++ users take note: It’s time to check if you’re hacked
A critical security breach has been identified in the update infrastructure of Notepad++, a widely used text editor for Windows. The breach, attributed to suspected Chinese state hackers.
There’s a rash of scam spam coming from a real Microsoft address
A recent phishing scam has been identified, exploiting a legitimate Microsoft email address to deliver scam emails. This advisory provides details on the scam's operation and its implications.
Cache poisoning vulnerabilities found in 2 DNS resolving apps
Two high-severity DNS cache poisoning vulnerabilities have been discovered in BIND (CVE-2025-40778 and CVE-2025-40780), along with a related issue in Unbound (CVE-2025-11411). These affect DNS resolvers located inside thousands of organizations.
Nation-state hackers deliver malware from “bulletproof” blockchains
Threat actors, including at least one North Korean state-sponsored group, are leveraging a novel malware delivery technique known as EtherHiding, which embeds malicious payloads within smart contracts on public blockchains like Ethereum.
iOS and Android juice jacking defenses have been trivial to bypass for years
Researchers have revealed that the defenses implemented by Apple and Google against "juice jacking" attacks have been fundamentally flawed. The input establishes a Bluetooth connection to a second miniaturized keyboard inside the malicious charger.
Researchers claim breakthrough in fight against AI’s frustrating security hole
Google DeepMind has unveiled CaMeL (CApabilities for MachinE Learning), a new approach to stopping prompt-injection attacks that abandons the failed strategy of having AI models police themselves.
Android Apps Laced With North Korean Spyware Found in Google Play
The malicious Android apps infected with the KoSpy malware could collect SMS messages, call logs, location data, files, audio recordings, screenshots, and more, targeting both English and Korean speakers.
Crook made millions by breaking into execs’ Office365 inboxes, feds say
Federal prosecutors have charged a man for an alleged “hack-to-trade” scheme that earned him millions of dollars by breaking into the Office365 accounts of executives at publicly traded companies.
NIST Proposes Barring Some of the Most Nonsensical Password Rules
NIST is seeking public feedback on the draft guidelines, which can be submitted via email until October 7. The goal is to promote sensible password practices that enhance security without burdening users or compromising their online identity.
Unpatchable Zero-Day in Surveillance Cameras is Being Exploited to Install Mirai
The vulnerability, known as CVE-2024-7029, allows attackers to remotely execute commands on the compromised device. The targeted device is the AVM1203 surveillance camera from AVTECH.
Defend Against Threats with Cyber Fusion
Cyware is the leading provider of cyber fusion solutions that power threat intelligence sharing , end-to-end automation and 360-degree threat response.
Learn More
Trending Tags
